(19) 



J 



European Pstsot Oifim 



Illlllllillillllli 

EP 0 715 247 A1 



in 



{12) 



EUROPEAN PATENT APPLICATION 



^43; 




(SI) »>i C!.*: GOfeF 1/00 










Appiksstiofi number. 9S3084:S2.S 




{22} 


Da;e filing: 23,11.1998 




{§4} 


Designated Conif&esinq SMm: 


* Pjroiii, Pater L T, 




m m qb 


El Cerrtto, California 94S30 (US| 


m 


Priority: 23.11.10S4 US 34476S 


{74} RepsessnisSivo: goods, San Boy 






Rank Xerox Ltd 


(71) 


Appfcani: XEROX GOfSKJRATiON 






Rochester tim Verfc 14S44 iWs 


Parkway 






teriow Buefeinshsmshlr© SL7 1¥L (<S8) 


(72) 


in valors: 






Stsisk. Mark vi. 






Woodsiris, California S40S2 (US) 





°swsr 

Id 



{54} System lor controlling the sHsiHfeutton ami use of digital works ussng dsgstai tickets 



{S?5 A aysism for com roiisbg -he dissnb«-los-f and use 
c! agiiui works (tot) iffimgdiptastscicgm. in impm&mi 
iwettfSwi. a "digital teRsS" is sjsso to sntsSs m iscksi 
hoicter to QxsfCiss ;.-c«ie usage dght {102} *<im fespecl 
5o a djgit5iS work u&a^e nghib ars used to »o a 
digits! wo* rrvay be used o; dsstrifju ted Each usage ritjhi 
may 8p««ify 8 digsai tjckss wtiich must be psesssof beior;; 
tfi« rkjhs may fes exercised. Gig«s; works are stored in 
;epos!tofjss vshich enfcscs digiiei works ysags «gh?s 
( OS) whisn usage of a 't g:i.:-; ««;k is; raqiissisei by a 
vscsjesisrsg reposiiofy 003,504} Each vspoyio<y has a 
"generic tfckei agem* which p^nciies iicksis in sorne 
instances; only she gsrtanc tsckst sgsm ss mamsary: l« 
other instances, punching 6y 3 *&pecisi tickst sgsrsf re- 
siding on another reposstoty may be needed. 
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OesoHpltsm 

The pfsssni invention retsses to the field of dtstbsuSien and usa^s rs^his enSorcemen! for digitally encoded vwsts. 

A furtdamerttai mm facing trse publishing and laformssilon industries as they consider esectswkJ pehllshit-ig is how 
•s So pr raven- she vir&oihowed and nnaesjounied dtoMoti or tssiags of etse;rG!»c»iiy psibiishsd magnate. fXiectrenscsHy 
pubilsheo materials are typicaiiy distriixstsd in a digstaf term and reersafed on a computer eased system having ins 
capability so tecra&ts Shi; materials. Audio and video recordings, software, it-coks and muitkroxiis woiks as© aH bslnp 
oiecirorMcaiiy pubismed. Companies in moss. tnciosmes receive royalties for each aoooursM for a'airvc-ry of fhe mste- 
nais. e g. the sals of an aacfio CD at a retail outlet. Any unaccounted distribution dt a work mates in an unpaid royaffy 
?<5 (e.g. c>opytr;g the siudto reccids-tg CD to anoines digital ms-D'aim.) 

The ease in wtsioh etaeirooioaiSy published «jorks nan be "pertae-iy* reproduced arid dtslnbuiito is a major concern. 
Tbe transmission oi Glottal works over neSAWXKs ss <uwmons3te£S One such widely used nstworfv is \m internet, lbs 
Internet ss a vwdespread neWsoikfaelliSy by which computer users m many universities, corporations and govemmssit. 
estfiteecmfnyrsicafe aod trade ideas arid information. Corrsp uter bt; ■ > i?i boards founder) she internet anci corrsrriercssi 
« netwark&sucfc as Compose?* csncs Prodigy aiioaf tor the pc&ingwKi ft'5rte«Q.ot digital information ififorrnafcon serves 
such as Dialog arxt t.EXlS/hiEXIS provide dateba&es o? curr*»-s5 information on a wide variety of top i A x 1* facto; 
which wilt exacerbafe trt* sliastlon « the deveiopsriem and expansion of the Nssnonat information imttjstruefure f)hs 
NM>. it ts anticipated thai, as the Ha grows, ins transmission erf dsgiial works over networks writ increase many times 
over ii would fits desirable to uffee the Mil for distribution of digital works wiihoijt the lesi of wi;ios.n o { ^ snShorKiid 
r.cpvmg. 

Ths rnosi s,t:atgbito:'wa:xi way ;o cu?b sec c-un-ed disir:but;on is to prsv<jn; un«yibor«ed cop*, no - \j ^raism*- 
sion. For sxistsrsg rfiatsnais ifiat are dissisibuied in digital :;srn. vafious ss'agnaidsi ars ussd. m tns cssss of sdivsara 
copy pioisnfion sshoraas whicb W tba nwtow <sl ca&m lhat oan ba m<jds or whicn cor jyp; fhe ouipijt whan ccspysng 
is dsissteci have been smpfey«d. Anotiisr scftwis causes sottwaie so become disabled after a prscfetsrmwd psnod 
oi sirm Sjas lapsfKi. A tochnique usod for worksiafson sollwars is jo raqniio vt\si a sspoctai fianiw;sri3 d;;v;s;a trsiis! 
depfssonicntho V¥orks;af:ion incrdeffonhssoftmfStforan. a. a., sss US-A-4.9S2..0S4 »n}!t{«d "Meshed and Apparaisjs 
lor Protecftng Compiitsf Sottyrare Utilising Codod Fiifsr Nslwofkin Coninnorion mi m Active Codsd Haftiwafe Dsvsco. 
" Soeh cfevtesa ars provided v«fh the aoftwase a!5d are commonly referred So as ttongtes 

Yat: asiosnof schasrso is to Osstribats sofiwara. bat wf5!0b rsqniras a "-say'' to onafois sis uso Tdis is aj-npiaysd in 
se distflbciion schemes whew 'demos 0 of she software are provided on a awfom afoag wish the entire proauct. The 
dsspoc issn Ssa isaaiy «s«>ci. bus in osdar to ;jse m acfyai product, fbc H«y must da p-jrcSiaasd. 1>;asa oahass^s do not 
hindsf eopyli-ig or tiisi software once %m k&y is W«y pcrchassd. 

is is an ob|£jci of she pr;?ser;i inventors so prcwid© an tmpsovosi sysienj and fmtttcd fa conttoiimg 9m uss and 
distribution of digiSal works. 

The invention accordingly provides a system and msihod as claimed m the accompanying clalrm. 

A ssyssors? fc; contfoilsng fhs diaSsibiiiion and vw of dsgiSal works nsmg dsgiial Slckais is dlsciosed. A tickaf la ars 
ino'icafoi- sha; the ticks: holder has aissady paid io? or is oinefvasc §rt?:1i«d to some specified fight, product or ssrw.e. 
in the psescsv; Invention, b 'digital tickst* ts used to enable she ticket holds? to ©xsscs&e nsapo i:gt;;s specifying the 
;oq;)tnsfneni of ths? digital ; tefsot. Usages stghts; are .jsed so define Mow a digj-ai wock may da used or distributed. Specific 
•so instances ot usage ngtjfs are assd to srtdicais a pastscuiar manner of rise or distribution A usage right may spociiy a 
digital ticket which musi be present feetoie the right may be exercised. For example, a digital isekst may be specified 
If} a Copy tight of a digital work, so shai exasriso ol the Copy rsgd! njqaiios the party iha; dasskea a copy of she dsgrtal 
work be In possession of the necessary diostal ticket. Aster a copy of trie digital work Is snccesstcHy sens to the requesting 
party lbs diglsai ticket is "pijneheP" to indicate that a copy of the digital woik has beer* made, Wher; the ticket ss 
•'pssoched'' a pfadasanriined ntirndar of fisTios. it may no tossgss be assd. 

OiostaS works are stored in repositories, fieposlforiss ertfos-ce the usage flghSs for digstal works. Each repository 
has a "gensiic ticks! agent'' which punches tickets, in some instances only ths ga;iesic ticket agent is necessary iss 
ofher inssanosa. panching by a 'special Sickas agsrst v residing on anothar rspasitosy may ba desifad Piinchina by a 
'special ticket .agent" eaafcles greater secansy and corssrol of ihe dlgstssl work. For example, it can help prevent dsgital 
ticksi forgery. Speciaf ticker agastts ars also usefai in ssfnai lasis wher a an extern! dshabsssa naesis to be npdssiea or 
checked. 

A dioitat ticket i* reerely an sdstanoa of s digllai work. Thus, a digtlai ticket may de dietribtiteP ainong repositories 
In She same fashion as; oSisr digital works. 

A digital tie-sat rnay ba uaad in many commercial acsnarioa Svich as in the purchase of software and prepaid yp- 
grades. A digital ticks; may alsso tsa esod so Itrsil; the number o! times fhat a rsgti! nsay be exercised. For example, a 
user may purchase a copy of a digiteil work, aloog wi!h the rlgnt so maka ap io 5 Copies. In ihss case, the Copy right 
syecld have associated therewith a digital ticket that can be peached ae to & ttmes. Ofher strep commeroiai scenarios 
will bacoino appaien; troas she dstaiied deseripsison. 
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A system w& tmibod m accoKWsss w«n the Invention will now m deserted syvsey of esampls, witb rsfsfencs 
lo tns scoomptanying. dtriwrigs. «n which - 

Figure 1 is a tiowchart iifusrrailnp a simple ftstsnttmron of tbs operates of Shs currently pretsmxl embodimsnt of 
the present ymrtxm. 

s Figure 2 is a btocK diagram itiuorrailug the various ieposiiory types and -he repository tfafssactsots flow betwsars 

thsm m Jhs c«««n% preferred errtrxidrrnen; of ;he present reversion. 

Figure 3 is 3 titek diaqram d « repository counted With 8 c;edii server in the currently preferred smtsoSsYisnt ot 
;ne present inveniion 

Figures 4a and 4i> are escampies of rendering system ss nay be utfeed in she aw&ntt? sfsrerred embodimenf 
?<5 of ihe present invsmion. 

Figure 5 riiusirafes a cornet!! s tile layout 'for a digites work ass way be nttes-d in the cur r onrly preferred embodiment 
at me -present rovon-ron. 

Figure 6 illustrates a contents- site iayout to; m individual dlglsai work ot she dsgrtai work of Figure 5 as may be 
u$ilte«ci m the currenily pfeterren embodiment of fhe jxwn! invert son. 
« Figure- >' iiiustraies ins cft-vjponsnts ot a descnpsion block, ot the currently prei'su-so srnbodifrssnt ot the w&mii 
snv's-nPon. 

Figure 8 Illustrates a description tr« for ihe contents trie layout of the di-gsta! vsock (fostrated sn Fhjm?8 6. 

Figure 9 illustrates a pastor* of a description tree corresponding ;o the sndtviouai o'sgesi ww* siusirated in Figure 6. 

Figure 1 0 slicstf ares a layour tor the rights portion ot a descriptor! block as may bo uutaed so she twenty psetsrred 
embodiment of the pressnf invention. 

Figure i'i is « description tree vshsrsin certain d-blocks ha^s FRIMT usage righis and Is used \o illustrate "sifter 
and 'lenieni* r\jtes lor resolving usage rights contacts. 

Figure 1 a js a block diagram ol the hardware componorrts ot s repository <j;s are mus& m me eurr sntiy prsl«ff«« 
omnodirriorii ot ino present wentfeo. 

Figure 1 3 is; a block diagram ol tbe funetiODai (!©g:cai! cornponents of a repositosy < ! « ar« usifesd if} ths-««f«m!(y 
prsisrrso smbrxti-r-srit ct ths pmsant mention. 

Figure i 4 i& dtegmm illustrating ha bmic eoroponents of a usage ogm »> tne currenily prslerrsd ernbodirnsnt ot 
the ptssam invsiitiot;. 

Fig^ffS is 1*9*6 ttie mugs risbis gfa^mar ol mo cufrsniiy prelorrob ^ttodomnt ot tno present ir-vontion 
st> Figure Jo is a tloscttaP lliostratsng tiie steps ot csps Scale deiivsry tsotiist cheeking and perfornwtcs lasting as 
performed in a rssgistnsion trarissactiofi as nmy m peflorrnod m this curfsa^tty prisfofrsd ombohisTiont »r )bs psosssif 
invention. 

Figure t ? :s a tiowchaP illustrafsng ihs steps of session snfomiaSsori exchange ar;d cloac synchrofisxattcsf) as may 
bs psdormsd m tne tvo&titty prelerrod jsrebooirrssoi ot ;no prsssnt irsvor..|at>, after sash roposaory m \m registration 
transaolion has soccesstuiiy compistsd the steps desrrrlbed la f Igurs 1 6. 

Figure IS is a fiowsjhan ittusinailng shs basic flow for a asagc tiarisaetsor;. ifscludir.g she common Gpersing and 
closing step, ss msy foe psfs'ormscs in the oprrenfly proterrsd embodireeni of ths prsseni Itw&nflon. 

Figure 1 9 ss a stale diagram of sasvsr srsd cllcni tepoBllorics in accoraancs wtit; a transport piolocoi toitawad wtian 
moving a dlgiiai msik from tbe ssrvot ro Ibeciicr;. repositories, as may bo pericrrnea m -he ourrrmtiy ssrsferfeooirsbod- 
•to im&nt of the presonr invss-f lon. 

A systsm to; soritrollina am and dsstrlbetiGn ol digital vsorks is disclosed. The prsser;; invention is dssectsa' to 
srippoPing commomias ••'ansrictiorsS invtsivrng digital works. 

Hsrern ths tsmis "cii9itsi want*, *wofi>" and "ccntenf refecso any i*ork mar has bson reduced to a drgitai repre- 
sensatiorr, Thss would iriclads any audio, video tasl. or n-ustireadia work and any ssoorepsriyino siisrpretsr ie g. sotr- 
wars! Ihat may be rec-airsd fo? recraaf iag the vsork. Tno refm comooBiio work i-otsrs to a rtigrtai wofis cotrspfisad of a 
co!tecttor>ot o-het digital works, Triaien^ K usags oghts" « "fights" m a tsms whrch refers so rights gtrBiiadtoa rsciplent 
5e of a (igiiat wx«. Oertsre-iy, Ibese nghis defee-hew a sisgjfsi wotfc can oe assKi and tf it ran be tanher disthb^tud. Eacn 
usage fight, wiay havs one or mors specified oonaiKons <0m must be saasiioa botors ins right msy bs exomisos. 

Figuie i is a hlqh iev^ flowchart omlltmg various o&lmte but which dsmonsfrafes the b«sic operation ot tha present 
iri«mi:Qn. Retsrrsng to Figure t. a cteator cseatas a dlgiiai work, stsp 101 "hoaeaforwiil ifjendrytsrrmineappropriaie 
usage rigrrrs and toss, aimcb ihsm lo the dlgitai ««ork. and siors them sn F}sposiiory t . step t02 'The doterroinaiion ot 
appropilats esage ngnis and leas %lil dspend on various acorsonnc faelors. The digital mxk mtwasr® secuseiy m Be- 
posrrory i untii a request lor access is rscesvecS: The ioqrjesi tor atreess Oegins with a session inlrration by anofher 
rsjxjstawy. Hare a fjeoosuofy 2 inmates a session vvrth Repository sisp 103. As will es oescribsd in qmW ttem 
beiow, thss session tonisticn mofudes s;eps vvnieh helps to mum ihnl Iba rsspectrva repositories am Uwtmtifcy. As- 
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sumng mat 8 session can oe established. Repository £ may thea request access to the Digital Work for a ■stated 
purpose, step 104 Ths purpose may tss, for e>tampie ; so pent the dsq.:tai work or !o obtain a espy at the diktat work. 
The purpose writ consspond to a specie usagg right m sny event. BsposiScxy 1 checks ths usage fighiS'assccsaies* 
With the digital work to detemiine if the access to the digital work may be granted, step 105. The check of the usage 
•5 fights esssotiaiiy evolves- a tieismmtation of whether a right associated wish the access raquesS has been attached to; 
ths di^ts! work and ifss eoruSSsons associated w*tt me ngnt ar 3 sstssfred jt ths .access rs <ie«(ecf. repository 1 tamsin&tss 
the session w:th an error rnes-&ag© : step 1 08. if access :s granted, repository 1 ttartsnuts the- dlgiiai work to repository 
2, step ID?. Once the osgstai work has been transmitted to repository 2. reposssory i asKSSsach generate biiiinp, intor- 
m&ton for ;na access which is srsosmmsd to a credit *mvw. stop 108. Such coofeie »ng reporting $ oione to insure 
?e saasrsst attempts ;o citcumverit she bifling process. 

figure 2: iiinstrates the use inters;: ; Ions- be; wear ■ repository types in ths present trwsntioa As wiii eecome appar eni 
from Figure 2, Sis various repository types wii; serve atifsrsnt tursctioRS. Si is tunoamensa) toai repositories wB snars 
st core ssi oi funsiicmsitfy which wiit enabie meats and trussed coninwotaatfcsns. Referring tc Figure 2. a repository 
S05 represents she generai instance ot a repository: Ths repository 20"! has im modes ot operation; a server morSe 
« and a requestor mm. When m the server mods, the repository wi be receiving and processing access requesrs to 
digital works. Whs;? in the requester mode, ths repository veil be iniEiatsno, requests to access diets*: works. Repository 
201 ;s peroral in ths sense that its primary purpose ss as an exchange rosste tor digital works. Owing toe course of 
operation, the repository 201 may communicate with a piuraiity ot other repositories, nam-eiy authorization repository 
203 rendering, repository 203 and master repository 204. ttyrxrtuniesUaR bsiweer; repositories occ«s utilising a rs- 
28 pository traesaotion protocoi 206. 

Oommunicatio?-: wsth an aaihorizatsoii reposkory 202 may occur when a digital wofKfc0io§ scasssed has a cohdstsors 
requ8it>3 an aeshois^aiioir Co;5cesmasty an arabor sxaiior; is a Pigriai esrtitieato such i;5at possession ot the csrtsticate 
ts required to gain access to Sno dioria; work. An asjthori^ation >s iisrsit a digitai work ;h&S ear; do moved sjetwaee 
repositories ano stfbjeetsci to teas and usage riahss condsjfoos. Art anthdaxaiion msy oe required by bosh repositories 
irwoived m an access So a cfccjitai work. 

Commariicaticn wsto a rendering fcqosisofy 203 occurs m eofinsciicn with ths rsnosring oi a Oigitai w ; ork As m 
be described Irs greater detail below, a residenuq repository Is coupied wl;b a rsftbsrsng devrce rs.q a printer device) 
to copse a resxiortrsg systsm 

Oommanieaiion with a rnasicr reposisory 205 occurs m connection with ootaining m irjenslfscation eersiticate. ioarv- 
se titfcr-iiion cs<ftit!C8tes are ihe menrrs by which a repository « identified a.s 'trustwortby' The u ?e ot Idantliieeiion certif- 
icates is descrrceb: deiow with respeci to me registration transaction. 

Figure 3 siiusirstes the repository 201 eoupfed to a credit sssrver 301. The credit server 30t is e device shloh 
accurrss.iiaies hlliirsp insorinahon lor ths repositosy 20t. Ths credit server 301 corrssrurrsfcaies «':th repositosy 20t via 
bsiiieg transactions 202 to record Mi:ng iran sac- ions. Burnt} transactions are reported to a biiisnp ciearinphousa 302 
-ts by the credit sewer 30"! on a per<odie basis Ths credit sews 301 communicates io the b:ikng clenrlngi";oese 30S vie 
clearinghouse transactions 304 The cieai inghossis transarsions 004 enabis a secure and encryptsd tiarisrrisssior; of 
intotmation to toe biiiing ctearinghoass 303. 

40 

A reridersng system is qeueraiiy defined as a system comprising s repository and a rendering device which can 
render a dfgiiai work into lis sSssired form. Exarnpies oi a rendering system rrsay be a comparer system, a digstai aitofs 
system, or a primer. A rendering system has ibe same security features as a repository The coupfing ot a fenoebng 
repository -with the rendering Pevsee may occur trs a rnanner sassahls for the type ot rendering device. 

*s figure 4a iifustrrstss a printer as an exampie of s rsrwemg system. Rererrtne- ;o Prgurss & pmlur eysierri 40 1 nee 
contained therein a printer repository -102 and a pan; devtce *33 it should de noted that the the dashed tine defining 
printer system 401 det:nes a secure system boundary Cornmunfcrsttsns wlshm the boundary are asssrsied to be secu re. 
Dapendmg on ids secufliy tevsi. the boiinean/ aiao raprssenis a barrier (ntsmfed to provide physicai inregnsy The 
printer repository 402 is an instantiation ot tne rendering reposs-ory 205 oi Ftp re 2. The primer repository 402 wtii in 

se some inssances contain an ephemeral copy ot a digtfal work which remains antii rt -s printed oui by toe print angina 
403. fn otbsf instances, rne primer repositoiv 402 may contain digital works seen as fonts, which wifs remain and ean 
de sjified based on use TTsrs design assures inset ail cawfMtsalion itnes bebvsvsn printers and pwtonq devices ars 
encrypted, anises they are wiihin a p:hys;c;it!y secrse bosfidary. This rtessan ieaiuro eisTiirifstee rs.posentirsi iauif point 
trrroijgh ivdisb the digitaf work coeid be impropariy obtained Tne printer cievica 403 repressnfs tne printer components 

•S3 ased so create the printed output. 

Aiso iilusifated in Figsre 4s is the repository 404 The repository 404 is coupied to the printer repository 402. The 
rseesrowy 404 represents an extsmai repository which contains drpitsi ivorks. 

Fsgure 46 is an sxansple ot a oompatei system as a rsndsone- system. A computer system may constitute a hmeito 
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function"' device since a my execute digits; wort® te g. solans piepwmj and dispay digssal works (0.9= « digitassd 
photographs. Loo:cassy ; each fendsrtfi§ device cm be viewed as having its own feposjiofy, afehooQh oniy cm physical 
repository is f53««8d Refsrrmg to Rgurs 4b. a ccropyter system 4iGhas eoniaiosd therein a aispiay/sxscutscn f3po&- 
ttofy 4 1 1 The dSsptay/axectiUon repository 4 5 i is eoupisd to display device. 4 i £ ma esscutiors dsvscs 4 5 3. The dashed 
•s feox staToendlng the computer system 4)0 reptessots a sscufhy boundary w$tm which oarm swsiealioos am assumed 
te )>s secure. TJ*i3 disp&y/ex&suifen refrntoy 411 is fuitn*^ «o«pfe« K> a e.f<*«st sewer 414 to repot; any tees So bo 
billed tor access to a digjia; work and a repository 415 for asxeasrsg dfglSai works sioted therein. 

Usage rights are aitachad dtraefiy to digital wotks Thus, si is «r : poftani io understand the structure of a sSgrtal work. 
The str ijatore ot s digttat work, in particiiiar composiis digital works, may bo rtatumtty orpaoffeo soso so aoyeiie sfractuts 
such as a {warcfty. For example, a magazine bm varices artistes and photographs whsh may have been creased 
and turn owed by different persons. Each of ins articles smi photographs may rsprssont a node m a hieramhiosl 
w structure Consequemly. control, i.e. usage r:gh;&. n^ay be placed on sash nods by she creator. By enabling control 
and fee httiing to be assocsaSed wtih each node, a creator of a work can be assured that the rights and Sees are riot 
circumvented 

fn me currently preferred eiTiOodirnaas. ihs tile inforrnasion -or a drgiiat mtk is divided into two: flies: a "contents' 
t:ie and a "description tree' 1 hie. Fi«rn the porssscfcve of a ieposiiory. the "octants* tsis Is a stream of addrassable 
byfes whose forniaf depends ecaipistoSy on the interpreter assd to pfay dsspiay or print thoosgita; work Tne oesertption 
tree tils rnake* « possible to sxamifis the ngssts and teas tor a work without reference $0 the com em of the o'tgital work, 
ft should be noted thai ibe tmvi description tree as used herein safes to any type of acyckc structure used to iepreseni. 
Sne reiaStonship between )hs vaooes component o! a dispai work 

Ftorire S »IU!fa!8S the iayoyt of & coo-ar^s Siia Raterting to Figure S. a <%!ai work is eompriaoc! ot ijory A 310. 
2S adveriiersirsent Sit. stety B 5tg and rsSc-ry C 513. it is assumed ifjst ibe digital work » stored staging at a reiaiivrs 
adotess of 0. escti o- the parts ot !he digtiai work are storao iinearly so thai: story A 510 is siorao at approxsmsteiy 
add:e;v;.-as O-SO.OOO. advertisement 511 Vt addresses 30 005-40 000. siory 3 5;2 st add: esses 40 00; -SO. 000 and 
story C SIS af addresses 60.001 -85K Tha dattatl of story A 5t0 ts itistraied in Figora 0 Betatm-g fa Hqura S. ths 
story A 510 b iijrsiiar broken down to show tsxt 6t4 siorad ss address 0-1500. soidtor phoio 615 ai addfossss 
se 3 50 1 -10.000. grs.phtcs 6 3 6 iicsd as addtessas 10.00 : -2S.00O aad Sidabar 61 7 etoted addtess 26.001 -00.000 hiots 
thai the mm so the tsxstonts fiks may be comprossecs -tor saving storage} or encrypted {for eaewdty) 

From Figures 5 sad 5 si ts rsadiiy observed that s digital work can fee represented by its component parts as a 
hierarchy. The eSescripticso stee for a rlsgitoi wotk is coraprisad of a sat of reiated descriptor biocks (d-bieokst. Toe 
aootanirs ot e?i«i d -bfock :s dasonbed wriih rsspsei to F tgero 7 Retstriog to Ftorira 7 . a d-biocs 700 iootndes an xjmMw 
3S 70 1 vshicn is a uasgoa identifier tor the work in the repository, a starting address 702 providing the stars address of the 
first byte of she work, a fength 703 ewng toe number ot eyies in the work, a ae/hSs postsoo 704 wf;areii> the gnsesed 
ysaga ngnts aod sheir status data are maintained, a parent pointer 70S for pointing to a parens d-btoek and cnsid pomier s 
706 to; pointing to the chiid d-feio<.ks. in Site criasntiy psefsned sfrteirosnt the denies: 701 has two pals. The first 
part » a trntqae rsambisr assieneil ti) fhe refsosrtory upors rtmW(miiK&. Tne essconrt part te a riftir^ne nurrreer assigned 
•so to !he mm. «pon creation. Itm rights portion 704 WiSi contain a oats stryciure. such as a fook-tip sabie. vvherosn tos 
veriorss intoaristion associated with a rl$ht is maintained. ';'he intormasion rsgiiired by she respeetrirs e&age ngh;a is 
described in rtnars detaii beiow. D-htocks forrn a ssnet tiieratehy The log d-isseck ot a work has no parent, aif other d- 
foioeks have one parens. The raiattonshsp of esage rigtiSs aetwean parens and chiid d-btocks ana how conflicts are 
resoivsd is dasenhad heSow 

A speeiat type of d-bfoek is a s sheik' d-btonk. A shaft d -bfrxk adds no new eon; eni beyond the eontoni of its parts 
A she:; d-bioak 'S usees to add nghts and fee inlormatiosi, 3ypica;iy sy Oistrihusors ot digisat works. 

Figure 8 issirases a dssenpiioti ires for the digital work oS Figure 5. Referring to Figure B : a lop d-biock 820 for 
She diaiiai: work points to fhe various stories and advisftefin-iente contained therein Hore : fhe top d-b?oaS20 pointri fo 
d-bbckasi frepreser-rSirig story AS)0}; d-biock822 {representing ibe advehisernent 511}, d-biock B23 {repraseriting 
SSS story 8-512) and and si-htoc-k S24 {repressritio;? skiiy C 51 3). 

The portion at she description tree for Siory A 510 is titsistrailsd in Figure a D-biock 02S represents text 614. d- 
isiook 926 repsessiits phoio 61 5, d-biock S2? represents graphics 816 by and d-biock 928 represents sidecar SI 7, 

Tito rights portion 704 of a descripiof biock is ftjrStter iiiesimsad in f igare 10. Figure 10 iiiesaaias a sifectitre wttich 
is repeated in the righ;s portion 704 tor each right. RaSenlog to Figure '!0 : each right: wiii have a right code field 1050 
and ssaies btotrnation tieid 1052. Tire right code iieki )050 wiii eorasin a eriique code assigrted te a hghs. T!ie status 
information field 10S5 wiii contain inforrrtatiaa feiabng to the oSaie of a right and the digital work Srscb inforrrHfioa is 
indirssted bsiow in 'table 1, The rights as stored in the rtghls portion 7fX may typicaily be In nsimerfest order based on 
She tight eode. 
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TA8L.E 1 









j \: S-V'-vHiV .i.r: : ";:.: 




Property 






! i«« 




Coeies-lo-lJso 




A counter of the number c 


* copies o! a work the 1 


are in uss. incremented when 






another copy ss used, dsc 


rsnmntad whan use i : 


s COmpiOiSd. 




Tims- Units 


sntiicatot e* 8te maximum 

OUi 


rsasnfeer 0? iiroe-ynsts ' 


ha; a docureeni can be to&MG 


Loans r-Copy 


Booieas! 


Indicator that the current > 


vofk is a Soansci out eo 


ov oi sir; aaihorKaci digsiai wor.k. 


i^raatnirsg-Tifne 


Time -Units 


Indicator at She seraasniag 


time of use on a matt 


srsd cjocaroent nght. 




Siring 


A string containing various 


> idi&ftiiiysng mSdmtaftc 


i about & drjeatTsent. The execs 






torsyrat oi this is no; spscfi 


od. but « cars sfiokdo i 


lionTiatiOr: such as a puOilSher 






name. minot msm. sS8f> 


3 number encs m on. 




Rovonus^Dwhor 


RO- Poser 


A haadio scisrasfying a revs 
usage Sees. 


n«e owner sor a 


work 'Hi's is used tor repofSino, 


Hisiofy-llst 


QsSs-Dessr 
Hlstory-Rec 


The date !ha: ihe distal v> 

A iist of events recording 
transfer, backup, « smio< 


ork was psobtrshod. 

he repostones ana d; 
e a digital work 




tfes for opera-sons ih?;; copy 



The approach for repseseof :rig digiai wotKs by separating description dais {sorts content assutrias shat pasts of a 
tiio&roooniiguousbtii i;iikasnoposi;lonon;haaett.ia! roprsssontatiooot consent sn pasticuiar is se neutral to the- question 
of whsthsr corstefit repressniatfcsr. fmf take an obiec; orionied approach it wowkl foe matur*.! to represent sortoit as 
obiecis. in priocspis. ii snav be oorivsolen; to have coritss-ri objects that Inciude the bitSng strectuse and sights Infosmahon 
thai is mprsssrttesi m ihe tf-bloote Such varsaiont; si's she design ot the s'sprssssiiiaison are oossiteia and art; vs&bls 
aiios'aatsv&s but nt&y iatsoduce processing overiiead. e.g. the irsiafprotaiion o! ihe objects 

Oigiia) limbs a;e siorad in a repository as part ot a hte;arch:cai Siia sysiasn. Foktera {aiso tesrrtad directos^es and 
5L!b'OifSo?orios; emm the digite; wonxs as weii as other toitfefs. Osgiiai wot ss mi loi6m$ in a iokfcf ars Ofderoa in 
aipf?ab;ji!ca) aide;. The d:gsiai worKs are typed to rsiiect how ihe liias are used. Usaga r*gt;is car; be attached t<; foidess 
so thai thss testier :;seit is \rmim a;s a digitssi work. Access to ihs ;s>idar woufcf thoj-! bs handiad in Sbe sarrns iashsc« as 
an> f other digitai work As m be cirssoribsd in more d<siasf bsiow. the contents oi' ihe iosderase syfojeci io their own rights. 
Moreover iiie rsjenasjWsBrit oghta rrsay be aSaohed to the fosde; vsi>rcr; defioe how tdder sx»>tents can bs rrjanaged. 

.MTofiMMG USAGE RiG HTS TO, A pjGiTAL, WOB?^ 

i; is it.:ndaraontas so thss presan; invsrif ion snat sna tissssge r^bis at;s treated as pssh o;' thss dsg;t;si work. As ihe diotiai 
work se disiribtJfed, ihe scope ot the grem-ed usage rights vsiff nsmalo ihe same or may be narrowed. For §x«rop!S, vvhen 
a digital work is isarssiarted from a <toe»m@Pt srsrver to a reposriosy; ttsa usage rigitis rnsjy stioieda the rspht 10 tcssn a 
copy tors o'edetermined parted oi tirne (caised Sbo orsrjina! rigbisj. VV^hon She roposiiory ioaas oa; a copy os ihe riwjiisi 
work, ths usage nghts in the sossaer copy tested the next ss? of nobisi could be est to prohibit any further rights to loan 
ou; ttsa copy. Thss basis; idea js tfsat ooe cansios grarst eiote rlghta than fbay bavss. 

Tno attachrnent ot usage rights soio a dsgsiai work tmy ooaur in s variety oi wssys if tho usage rights m he ihe 
same tor an entirs digital wo;K. they couid bs aiiached mm the digits; work Is processed tor depossi ;n the digitai work 
sarver. in the casss o! a dsgiiai work having ditiaf rssft usage ngsits for ino yencsjs oompoesnts. this o;ss> bs csone as thss 
dtgliai work t* ooing cheated . Maoihoong tool or digsta! work asserabiing tool eoaid be iJiixed which pm®&- ior m 
eutarsated fsxscess of ssttaohsng ihe ijsaqs rights. 

As wiii oo described bsiow. whan a cisgsuii «erk is copied. ;rarisiefred or iosmed e 'mxv. ser of rights* can be 
sptsoitied, 'i'hs'neki sst ot rights* will ha attached to iho dibits; work as It ss tansporsssd. 

i?«8«Mj§ Cmmtiag Bighis 

Socasjsa each part tii a oiigftr-l work may havsj itstM Sisage rights, ibero will bo irsssiarioos vjJisre ihe rights oi a 
"contaloocs par;' are different irom ifs parent or container part. As. a iostsii. oorifilcf rules nsus: be esiabilshed to dictate 
wttsii and how a right may bo aserclssd. The hierarchlca! struoture of a digrsai work facilliatss tita enforcassant of such 
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miss, A "strict" ruis would 6s as foitowp: a right tor a pars In a digiiai work is sanctioned if m6 only si is & sancitortes 
for \m pars, for soee&tar d-bioeks cftfilwifig tfss pars and for at! cfeseenctent d-fefecks By sanctioned, if is meant 'that 
{1 } each of the respective parts must nave the right, and (23 any ocndiiions for exercising the right are seiss? ad 
it also possibfe to impiement the present kmrtim using a mors tenient rule, }« the more ienieni wfe, access to 
* the part may he enables to the descendant pests- wtsich have ttss right: Put aeaess is denied to She dosearrdenss which 
do not. 

An example oi applying doth She- strict rate end ieniont ss stlustrataiS wr#t ie'ersnce to Figure It . Referring So Figure 
11. a root d-btoek 1101 has chad d-fciocks 1102-1105 in this <m&. foot fJ-fefeck represents a magazine, arid eiseh of 
the chiis d-bioeks t 1 02-1! 05 represent articiss rr> the magawis. Suppose thai a request is made to pmm the dig-iai 
?e work represented by toot d-tsiock 1105 Ysbsrw. the strict ryie :s followed The aphis for the root d-atock 1101 and child 
d-blocks nQS-HOS&fB thsn snesmteed. Bootd-blcsek 1101 andchiidd-cteks 11 08 and 11 OS haves bean granted PRINT 
ngpfs Chi-d b-siock it OS has not been grmm PRiNT ngpfs snd chssd d-efock11G4 has PBJNT rscshrs oonditkwadon 
payment of a usages tee. 

Under i«e sinei ruse the PR5NT right cannot be expressed heesrr-seths ohiW d-biock doss not haws the PRt&T ngnf 
« Undst the teroem rule, the raseii vvoufe be dlfseron!. The digW works represented by chiid d-biochs 1102 and ■ :QS 
could Pe printed and the dlpiiai work represented by d-Pi'osk 1104 conid he printed so long as the usage lee is paid. 
Only the digital work t epr ssented by d-bfock 1 1 03 eourrf not m grinls-d. Tnts ssms rmM wourd be atxornptishsti under 
the strret ruse it m requests » direered so each of tha mows&at dtpjiai works. 

The present invention supports venous canr&kBiifans oi aiiowmg mvS sSmttowtg asscess. Moreover as wiii bo 
tts deser iped bsiow. ths usage ngm $?mwrM per rDits the <nmw of a sio;riai work to specify if constraints may be imposed 
on the work py a <smamt Part. The manner ^ ws-sich Otpsai vwks may be sanctioned Pecause of usage fiphrs confiiCis 
wouki be i-Tiplemsritefioi - : specike ai5d wonib depsrid m tha rww& of ?ha dspjfSal works. 

REPOSSTORIES 

in i:ha description of Pi^ure S. t was indrcststi thai rsposiioriss eeme in venous fenns Aii reposiioriss provide a 
core set of services tor ths tren jm:ss:on of orgjiet wotks 'i'he rnaerior ia which <iig\Wi works ere exchanges rs itn basis 
for aii iiansaebon baiwisea iepossioiiss Tha various repository types hitler in trts ethrrBta Innsiions thai they aerfora}. 
RspC'Sitorsss may be devscas ibemseives. or snev may be incorporates into other systems. An sxampie ss the rersdsring 

sp repository 203 of Figure 2. 

A repository wit- nave associated with it a repository ideniifiOi: Typirssiiy. the repository idenisiser woeid he a aniqao 
nember assigned to rho repository at she hrae of manufacture. Each rsposPory wiii aiso bo ciessified as Pe:np so a 
paaieniaf aacnnsy class: Coriaii? oomnieaisaisoas ai?d trarisacSbns n>ay tsa oondiiionad on a -eposiioiy hestg in a 
particaiar saenrsry ciass. Tha various sscuoty eiassas are oaseribed in praaier dafati beiow: 

-is As a pferoqaisite to operation, a repository wiii reqyirs possession of an ideniifieatsoa certificate ioentif scat ion 
certificates are encrypted to prevent forgery and are issued by a Easier reeosstofy. A {raster reposiiory piays She roie 
oi an aefhoriiaiion agoni to enabie repositoffes to receive diqjtei works, ideotifioaiion eeriiticaios must be updated en 
a pedooV. Pns:s. idej;>iiicatto;i cett:f«atss a;e desciibed sn greaier oatai! Peiow yn$\ respect So tfis repieSi'ation trans- 
act ion. 

•so A repository nas bosn a hardware and tuncttonat emhooiniens. 'i'ne fanctionai embodsmeai is t/ptcaity soitware 
exeouting on She harbware embodtrwat Aiternaiiveiy. the iunetionai embodimeas may be omPeddob sa ?he !»d«8 
ssntsodifftsnt ssjch as at; Appi:caS;on Sprjoiiic :r;;egiatad Girctiir {ASIC} cbsp 

The hardware ernbotiifoens oi a repository wiSi be snciossd <n a secure tiousiup which it comprontised, may cause 
the repository So Ps disabled. The basse componen-s of ibe hardware eiribodiment oi a ieposstoiy are described wish 

*s reiaieoce toFigsiio 12 Referring So Figure s2. a repository «s coniprirsed ot a processing means tah'X aiorrirje system 
t20V. cioctv taOSand externa: mtenace t206 "the processing means igop :s ccmpiised of a processor eisreon; 1201 
ar;d processor rasrrsoiy 1202. The prooesssrsg riiaans 1201 provides coniroiiar. reposiiory tfansaoisori and esnge ngr;!s 
Sraasrsetion taaciions tor the repository varfoas fuacf :ona rn the operation of the fepossrory sneh m decryption isnd/or 
decompfess:on of digrsai wor - ks and transac-ion messages ase aiso petforinsd by the processing trmm 1200. The 

5P paxessor eierrrent t SOS may sse a. microprocessor or tMhsr suirrsbia compaSing oorTiprjnent The processof mernory 
1 202 *ouk$ iypicaiiy be tottiw comprisea of ReadOniy Memories rROtvt; and Random Access Me:-nortes fRAM} Such 
meniories eroeld eonrsiri riie sottware iastrardioas ntiir^ad by ihe processor Siemens 1201 sn performing the functions 
of the repository. 

Tne storage system 1207 is todhereoasorisedot ossenpror storage ;20S and coi^tem storage 1 £04. Thsdeseription 
tree storage 1 203 w;h store itje description tree for the drpjtsi work, a?id the consent sfomgo vsiii store the associated 
coaient.. Tha dssenphon use storage ] 203 and conreni ssorape 1 204 need noi be ot the sense type erf storage medium, 
nor are they nseassariiy on ins same physteai device. So for example, ids descriptor storage t203 may be stored on 
a soiid :s5aie storage ffor' rapid ietaevat ol the description tree information), wtirie tt?e content siofaae -204 msy be on 
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a hi* capacity storage sych as an ootieai disk. 

The stock i 205 is usees io ttm&-ssar«p vmsm \im based condtiions for usage ngnls or lor motoring usa§« Seas 
Wfhtch sway so assooaled vss8h .ths- digital woms. The cfoc* 12Q& wis nave sn umrttemjj&t&te power syppiy. «g. a 
battery. In order t© maintain jhe integrity of tha time-srsrops, s "he sxtsfaai interlace mm® t SOS provides for toe signal 
•5 connection io oiher repositories arsd to a credit ssiver. The externa! tmsrface moans 1806 provides for the exchange 
«t signais via feted standard irstertaciss such as RS -232 or Persons: Computer MsaftuSsetwrs?* Card f ndustry Assentation 
{ PC MClAj smrcfeNfe. or FDD!. The mttmal imtmts mmm \20B may also provide nafwork cmmAwm 

The functional amtxidtrneni or a repository ss described wsth reference io Figure -3. Referring to .Figure tS. she 
tonetionai srnbodimem is comprised or' an operatrnq. system tact core repository services 1303. usaqe ttswtsacisoft 
f« handters 1 303. repository specific inactions. 1 304 and a user Intedaca 1 305 Tha operating system 1 301 is soeeihc 
fo ttts repository and wouid typicaiiy depend on Jhe type oi processor being trsed. Ttse operating system 1301 wouki 
aiso provide tne baste services for ewtfsoiimg and interfacing satween ttsa basse components ot the repository. 

The core repository sasvses 1302 comprise a set oi functions fecial: ed by ssstch and every repository The core 
repository services 1302 inciuds ths session initiation transactions wtiien are defined io greater deiaii berow. This sst 
« of servscss afso snefcoes a oeoenc trchet agent which is used io "puncfc* a digiiar ticket and & aertenc authorization 
server lor processing auihodxetton specifications. Diglral takers and auihot sessions at® spew's tnechatwnslor con- 
irciitng this distribution and use or digiiai works and are deseeded In snore detati below. Mote that couoieo to t«» core 
repository services am a plurality or identification oertiticaias 1306. Th« identification certificates 1308 are r§qyifs<1 to 
orrabie rho rrsa oi tfrr; rspoariosy 

The isaea riransaeirons haadrai's 1 303 sjompfss© f'-tnerionarriy t<st proeosssrip access repuesis to digits: works and 
for Psliing less basso on accoss. Tho asa^e srsinsraettons srjp&ortad: wsii bs driterem tor aaoh rspoaltory !yps. For ax- 
ariipia, I; may mi be naeessary ior soros rsposisonas io iss'sdls accrsss raqussts for dlpiiaS works. 

Tho ropository spsciisn ianoiiooaiity 1304 coasposas Janciioaaisty that is unrqrra to a repository For exampia. tna 
masior rsposiiory has specrai iunchonaiib/ ior issuing ciiplta! ccrlltlcarss a ndrriai n$ain lag e nary prion keys. The raposltory 
spaosito tufKixirrairiy 1 304 vsjuid Irwiuda tho user tniarfaco (mpiariisniaiion Jot !he repository. 

for soma cirgrrai works ids icssss caused by any rndsviditai instance oi unauihor izae sopyrap ts insignificant and 
s>? ihe ohloS economic ewesm ifes In assunno 'hs convenlenco oi access arsd iow<jvsms%ci hilliarj. m such casea. simpia 
and snexponsiva haadheiri rspos;ior ias and nssfvsof k-foassd svorkstarlons may be suiiafe repostiohos. ovan tnoygh ths 
rrm&yfes and' guarrsnreas oi sec c my are modest. 

At ihe oitJsr a«dame ; same diqltai work;; each as a dlgiiai copy of a irrsi ran tmm of a dsarsr boad or stock 
oarhiscafs. wocid oe of very hsgP vaiae so tnai it ;s pradaar to empioy saaiion and iashy er<ibora1e socarify msasaras ;o 
;k anscm tnat ihey are not copied or forged', A tesosatsy scsiadla for noidihg such a orgtoi work couici nave siaoorare 
maasures lot easyritrp physics;: truagnry m<i for vsrttyytg aeShoaxshon before use. 



By arrangrno a universal protocoS, aii kinds of raposiiones can commrjaicaio with each oiner rn prmcipip. however 
er«a;o;« a: sotna works will warst to spscsiy ii"sai rheii works ortiy tro irairsteired to reposfio? :ss whose i&vei oi seeeiliy 
is high enorjgf:. For tt?>s raas«s i ctaxnsnt raposltofies have a ranking system for' ciaasss and iaveis of security. Tno 



40 


security c;« 


sssas in the currently pfststfeo - ombodrrnsnf ara dssondsd in Tabie 2 

TABLE £ 




REPOSITORY SEGURiTY LEVbLS 




f.eyei 


Doscriptio;'! oi Security 




0 


Open system. Doc:.imanS rransmission is aasncrypied. No mgmi cehtttcata :s reqc rrao for screntiticafson . 
Tho sacut:iy of idc systatfs depends mostly on jsos honesty since oniy auxiost knowiedga rnny bs rrtjeded 
to cifcrjnwsni tno mutty measaras. The repository has no provisions for prsvsntlng unamhorteod 
proprarnstroni rynnsnpand accessing or cooylnghias. Tha system does not pravant the use ot removable 
storage and does trot encrypt stored Mas. 




1 


tytrnim&i sacta-rty. Life ths pravrocs class sxcspt thst? storaa frias ara minimally encrypted, incfading onas 
on reinovabia storage. 




s 


Base sscatiry. hike the previous class oxcapt rhat special fools and hnowisdge are required to 
compromise ;ne pfogramrninp. tho contents of the repository, or the stats ot the dock. Aii digital 
sorainynicationssraPncryptad. Adipitaiasrtsticaie rs provided as idantsiicsiion. tvladrum lava! encryption 
:s iisaa. Repository sianriiication number ts uniorgeabte. 
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TABLE 2 (continued) 





mPO&VCm SECURITY LEVELS 




Level 


Descdpiiofs of Secanty 


a 


3 


General secu my. Uke the previous class pktsti^fsqtJlfs^nsof spscis'jc^i&afsns^rftocornsfcwiss 
8)3 physical Integrity of the repository and thai modes! arKm/p-ion is used on ail tfarsswissions. Passwxd 
protection is required to use ths focal «ser lessrtaee The digital dock system cannot be roses vainott! 
authorisation. Ho vvoiks <m<M be stored on {3itsqv&&& sioegs When executing works ss piogrsum it 
f««& t««w in thesr ova; address space arid does not gsve }hem direct access :o smy iiie storage orolSwr 
memory coo-inning system eocSe or works rrwsy can access works ociy shrcugh tho transmission 
transaction protocoi. 


rs 


4 


Lika She previous class except SS>al Ssioh love! sncryphon is used or; aii communications Sensors are 
ased to record attempts si phystcai arsd eSecironlc tampering. Aiier such laropefirtcj, ine repository vvsSS 
not perform other ifsrhgactions umH is has fesorretf such tsmperlno tos designated server. 


SO 


5 


Like the prevSoas class except itm ff the jsnysical or ciigii/a! ariorrspls a! tampering exceed soma preset 
•hrsshoids ihss threaten she physical inisgriiy of the repository or the- intepnSy of digital and cryptographic 
barriers, shen 5h&repoasiotyvv!tiaaveoii§ydocun!i3«tdescr:piionrsKXi!'dsol htstef y outwft erase or destroy 
any digital identriier s that eotild be misused it ml eased to m ans-cr^pulous pany it also modifies any 
csriri'icaieso! authenticity to mtiieate that the physic?)! sysiam has been compromised, it also erases ihe 
contents ot designated decumeeis. 




6 


Like thapreviosjsciSiSSSXcepltlKs; the repository wiStatssmps wtioiess communication to report tampering 
sod will employ nosey alarms. 


ss 


10 


This would correspond so a very high leva! or security This server would maintain constant 
eomrrienieaSions So remote secerety systems reporting transactions; sensor roaosops. and attempts to 
circumvent security. 



Si ., 'i'ne c.haf«cteri?at!on ot tecutiy tevete deserved in Tasle 2 is not Intended to he Lxed More important <s ihe :dsa 
o! hsvflng dltiersnt aacuhly levels for ditf erant rspoastosias. It ;s anlicspaied Itisl r.sw secynty classes and rsquisernsnta 
will evo-vs seesrdsnc! Is ■sects! siiusiioos and cnaopes in tschnolopy; 

$&p&stfo?y $J$£t /rsrer&j£$ 

A eser mistime is Drc«diy oetmad ssa me mechanism py wnich a cser intasacta mn a rep^jisry m order so srsvoKs 
icsfiseelrosse to gasn accoee to a digital work, or ssxerosse usege nqtm As descrsseci aeov» : « j'eposttosy aay be em- 
boctioo sn vancus totms. "TYie use? inisrtace lor g. reposilory wili di'lsr depsndiiir; on sne pariicuisir es^Oodsmeht Th§ 
am- tettace rnsay ds a praphrcal «ser ::ii!3rface having toons sepsesantsng ihe digila! vvorka «nd the various awisaclioiis 
rt that may oe perfcrmoe. The user icsertace may bo s pecerfHoe dsaieg In vfcm a user is pfompieo lor •ntorrris-iron. 

The user interlace asalt need not he part of the rapository As a repository may fee embrsddsd In some older device, 
the esa; lnta;fsas may ifieseiy ha a past ot the devsca in which the repository :s arnbadded. For axamplo. the raposrla;y 
coeie Po embedded In e "caid* tha! is insested into ac -aveteble stoS in aeomp-ites system The isser intertace may be 
a combination ot a display keyboard, cursor comroi devics aod soliwars executing oo the comprstsif syslsm. 
^ A; a min»rHjm : the user interface must perm!; a user to input IntosmsSlor: suet! ss access requests ai5d aipfia 

numeric csata and provios ieedbaoK as to sraosaotton status. Tb& csor interlace wiif then oaess the repository to ioiiiate 
thessitabisihsoaactioristoaerv-icaihe request aharts^stsofe^tic'iiiaruser^^^ 
tha! a repostay will ptovde. 

In the present invention, fees may be assocraSed with the exetoise ot a right. The requwement lor paymerst ot lees 
is descfibed wish each vs; sior; ot a nsage rsgi;i :n the usage iigh-s ssnpeege. The ieeoidirsg and rsporsing of such lees 
Is perfermed by She credi; server. One ol the capabtilttss eoahled by associating tees with rights is the possibillSy o! 
^ supporting a ^ide raftge of ohargieg mmw. The simptest model, used by eo-ivsntional so?tware : Is that there is s 
siiigie iee at She tins* of purchase, aster wh;ch she purchaser obteirss urslirs'sited r^gtiss to cse ;he work as o'tsn and for 
as long as ha or she wants. Alternative rrsodels, include msScred ess and vEiriabie ices . A single work am have differ eoi 
fees tor different uses. For example, vowing a phelograph q;i a dlspiay cocid have drrle feat lees than r^aklng a hardcopy 
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of mcius^i; it w s nawry &mm work. A key jo these aSsm&tnre charging momte is tetem «-fw overhead means 
ssiabftshlng fees and arxetiftfing lot srsds! oa these trarssaefsorts. 
A eradt; server is a ccwpaiatfonai system thai remfy auinorixes and records 'tries-© transactions so that less am 
biffed and pasd. The credit server fapotts teas to a bi^na ciesringhoyse. The biliing cisaf Inghouse rrsariages the hnanclai 
•5 Snsosactrons as !hsy occur As a result, bite may m gsner&ag and aecousjts reconciled Prefer atefy She cf edit servar 
woutd stora me fee Uasisactions and peherfleaiSy ctemmurwc&te vis a nstvwys wrfsh the bffisso, eiearingnous-s tor rscosv 
citation in such art err-bodHrsers!. <w?irmmscattas writ; the biitmg deasinghonao wouid be sroyptad for iraegrisy and 
security reasons, w another omootsfrrtem. the crecstt server acts as a "dab;; card" where transactions occur in "real- 
time* agates; a user account 

?<5 A cradst seivs; s& comprised of memory, a processing means, a dock, and interiace means for coupling; to a re- 

pository and a finance insirtsison fa g. a modem}. The credit server wift aiso need so have security and authentication 
functionality. Tness elements are essentially the same eJsmenis as those oi a repository. Tiius. a singis devsce cart 
be both a [apostesy and a credit server, provided that I; has !ha appropriate processing elements for carrying -out ths 
corfssponbroc. tuncttem and protocois. Typically, however, a credit server would as a oard-sured system m the pos- 
ts session of the owner ©f ;r,e credit. The credit ssrver is copied >o a rspoatory and woufei fotertscJ via financial trans- 
actions as described beiow interactions .with a iloanolai institution rnay occur via pro-ocais established by 9m financial 
i f ;st itut ton s SSiamsei ves . 

Sn the cuffgnity praterrsd §ftifoodfen§fU credit sewers associated with both ;na sstver and the rsposSory rspon: ths 
t:nanc:ai trsnsas;! san to the bfiis'sp sinaringhoDsc. far assnspis, vsban a rf:gfia? work is copied by or© rcpnsitosy soarsclh&r 
for a fas. crsdsi servers coapsac to aaon of ins rapccsSonss wis tspon ths iransaciion to ihe nrising eisaannbo-jca. This 
ss o'sssnsbsa in that it insnras that a sransssciion WiSi be ssjcpunied for in the avers or sonta brasK m the cwamurjicstw 
baiwaaa a crndrE mtmr arsd tf;s nitling ciaani?af;cnsa. Hawnvar. soma in^iemensatxms a;ay ansnody or-;y a s:ng!s 
crcdi! acwar r«spsxtiog tha transaciian ;o minirnijo irarvsaction psocsssing at tna ass or iosing some transactions. 

ss mmmmmimmm 

The presan* iavanrjon osos. staiarrtants in a high fsvei '\riage ngrns Sangiiaea" to datrca ri.gh!i.- ».Si,aclatod wMi 
dtgiiai wwHs and iPsir parts. Usaga rlgnSa ssststmrns aie trrtsrpmied tsy raposSonaa and ara asad to dcianf iina wfint 
iransactf&na can oa saccacstaiiy canssci o;ii tor a <stgosi wxk and also to determine parametsre tor Jbosa transactions 
an For sxampie. santencas m tha iangnaae datenrsina whetner a grvsn digh&i weak can be copied, when and how is can 
bs assd, and what fsas hi any! ats to aa cnarg<Ki far ;haS nsa. Once ibs iisaga rights statements arc gonaratsd. tPay 
sirs ancodsd in a ata'isbia form for acoss&ing darsng rha procssstng of transscttans, 

Oaiii5!ng ijsaga rights in taws of a iarsgnage m sofdomikm wan the braiafchicai iapiasanSstion o? a dsa:ta; work 
anabiss the support ot a wida vsrssly ot &&tm&«3ti ano tss scbemss. An sKarTipia •& tho abri>!y ro aitacn rrtaUipia 
;?s versions ot a ngr;r to a work So a creator am a««ch a PRif^T right -o make 6 coptaa lor $10 00 and a PRiNT righ5 to 
make uaiirniiad capias io; $100.00- A pnretjasas rrsay than aPooaa which option Past fits his r;sads. Anot!5ar exarnpfs 
is that rignts and Sees sr« adattiva. So in ma case of a cornposiie work, ths agnts aod iaes of escb ot ;na cornpensnis 
works is assd if - datsnniriing ins ngPrs and faas foi tf;a w»k aa a wfsote. 

The t>asis a>ntants of a ngftf are riiastiatrsd if? Ftgum 14. Sciarang to Pignra 14. a right )4S0 tsas a ta}nsar:;k>i>a; 
•a> component t45t ano a spacsficaPonscornponan? t452 A ogrtt has a iabsi fs:g. COPY or WJftjT 5 watch tndscates 
the use or distabution priviiegas tha; are embodied by jfie right. T'he transactional cornpoaanr s45i cofrespoads to a 
paaiecSar way m wiirats a diktat work may be used or dtstribatad Tha iransaaaonal cornpaaant 145t >s typicaiiy arn- 
bodied In sottwars Instrriciions m a repository wtiion irapteraanr the use or diatrlbasion privstaqes tor tna ngfa. Tha 
spso!itcatiOi5s caiTtporisnta 1 452 a-o aasd to spacsty coobsPons wfiicn nsasi be satisliad prior to -be right Prjitig axarcisad 
as or so dastgnais vanaas iransrisc-ian rsiatrxi paraniatsra, m tna enrreniiy pfrjtarrad arnbodin-anL tbasa specttrsanans 
inciada copy conn: 54S3. Fess and incentives 1454. Time 1 455. Access and Sscartiy 14S6 and Controi l-W. E.acb 
of inaae spaaiiicairons wtii ba dasenbsd tn greater deiasi below With ioepsct to the iarignage g&'rew atomansS. 

Tha usarja rrgnts Isnrs-jags $ based on tha grammar dasanbad bskm A -^tmmm ;s a eonvantan; moans for 
datsainp valid sequence of symbols for a iaagnage. Si? dasciibtag the gramaBr sne rrotatton "faibtcf ss asad to indicate 
5P cirsiinc! choices among alternative?;, tn this ©Kirnpte. a sentence -cars have siffw an V. V or V. it rnnst include 
exactry one of tnam. 'ins braces {} &m assd to indicate opt;oaai mm. Nol® that brackets, bars and sraoss are used 
to descrtbe the iaagnage o- naage sights sentsttcas bui do not appear m aatnai sentences in the fsa^^s, 

in aontasst. parentheses -are part of tha asrap,a nghts iar;;jnaga Pararitbssiss are uses to group stems together in 
tests. Tna notation {x*; r§ used so indicate a vpnabfe Sength iist. that is. a iist containinp; one or raore. items of typo x. 
Tha notattor; ixf ia nsad io iridtcate a sranahie riuntber oi issts contatsiing x. 

Keywords tn the graramaf are words iotiawed by cotons. Keywords are a. common ana vary speclai case- In the 
iangaags. Thay are otter? used to indicate a ssagts valae. typically m Identlftsr. in many ce&ss. trie ksyword end the 
paramsiar ara anttraiy options!. What! a keyword « gsveo.. it oiien takes a smgle identifier as its valna. In soma cases, 
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to the usaga nghis Lsftcjitage, lima is specified m an honrs:m:m;;es seconds (or hh <nm sss representation. Time 
20t5S indicators, e.g. pot 'or Pacific Dayiighi Isms, may also be spectei Osiss sre fsprsseriiecs as year/ r?mitt.''cmy 
/or YVYY/MMM/OD). Note that thess time and dais representations may specify moments in isms or tmits of time 
•5 ivioney uniis at® ipscltd in tantst of doiiars. 

Finally, at me usaqs rights language, various th^gs" wiii need to inioractwrrh eaehotner For example, an instance 
of b usags ngh- may spectly a bank account a digital ticket., etc . Such things need to bo identified and ass specified 
herein using tne suilnt "-iD * 

The Usage Righis Grammar us listed sn ite entirety m Figure j§ and m described feefov* 
fe Grammar sterner* 1 SO; "Digital Work Rights: * {Bights*}' dftSarre the digits work rights as a set of rights,. The 
sat of rights attached ?o a digital weak define how -hat digita! work may be transferred; used, psrfostrsat et played. A 
set of ngnts wts atiach to ths entire digits! work arid sn ths case of compound digital works, each ct tha components of 
the digital work. The asags rights d components of a digital may bs o'rlteferii. 

hhamms; element i&02 *?5:§ht : a (Rsghf-Code {Cspy-Coani} (Control- $ps?c} fTinoe-SpssHAace**- apes} 
« {Fee-Spee})* enumerates ths content of a right. Each usage r;ghi mu&i specify a right code. Each right rr«y also 
optionally specify conditions which must be satisfied bstose the right can be oxsici&sd. These conditions are copy 
cowm. control, tirrse, access arid iao conditione in the csrrentty preferred eenbodrmeni. lot jh« optional elements, ihs 
foiiosvtnq dsfsyfis apply copy count equals 1 . no time limit on the use ot fhe hgnf , no access tests or a security level 
required to use the right and fie fse roquiied. Thesa conditions wtfi each bo daschbed in greater detisi: beiow 

it is imprxiant ;o oote ihat a digst/si work may nave mtmipfe varsions of a ftghl ««cn hav^»g she same rsgat: code. 
Tt'io rriijifiose version would provide alternative Condons and fess for aceessine, the digital -mtk 

(.•icdmtmt &isr«&f» ■ 50'; "Right-Code . » ^ender-CcHte i Trsnspori-Code i Fi!e-iite3gBm*m-C<3«'«si Derivaiiva- 
Works- Cod® Co««g«f«tk>«»Code* distinguishes each oi ths sp«««tc. nghis in;oa partsseSar fight typo (aiihoogh saoh 
rsghl * ideniifiea by clisttnci fight codes,}, in ihrs wey. the grammar provides & ;:at&!og of poss:bis< rights Ih*.: can be 
assfKiaSed with parts of flirjifes works, in the taSowing, rtghts are oWided snto caiegsisos for aonvariiencs in describing 
them. 

Qf&mrw eisfnea; 1504 s Render-Ceds i ~ |Pfey : player: Pi3yef--iO|]Pfin;:iPri«sr: Printsr-iDif fssts a category of 
rights a!i involving iha making of ophefnera!. transitory or oomdigifa! copies oi the digital work Mm nse ihs copies 
ars arasert. 

$%> 

* Ptey A process of rondarifjo or perfcsrmiftg a diglta! work on some processor This sncfodss seen ihings as 

paying digital movies; playing digital music; pfaylng a Video gams, running a computer ptoqmtn- or dis- 
playing it: document on a display. 

* Pant lo rsndar inn work in a medium that is not fui'thor profs-ctad by nsaga rights, such as printing on pspsr 

ri!;arii;r:n; ninmt.'ii; 1505 *Tr«nspoft-Code : « fCopyiTran&feriL&att {R«maifsing-RI^>5sc Hext Sot-ot-ttighis]) 
fN*xi-Copy.Bi«hts: N«xt-S«f «f Rigm*)}*" iisis a c&Ssgory ot rsohis invoh'ing ihe making oi psrsisisnt. ssabis copies 
of the digital work on oitior rspoationss The q>teaf Nejcf-Copy-Rlghto deiSffwss the rights on ths vscsrk aits; if is 
iswjspottod. it this (s not spscHiao. U?on rno rights on ths har-sporiod copy a;o tha san;e as en iha original. The opifonal 
•*o Rnmaining-Rlghis spsoity ihs rjghis tha! rsmssn with a digiial «crk when ii is ioansd out. If this is n&! specified, then 
ihs default Is that no rights can be sxercssed when it ;s loaned out. 

* Copy fviaks a new copy of a work 

» Transfer IVtaving a work from one rcposl-ory !o anotfier 
*s * loan 'tsmpoishly ksrsning a copy to anornor i'soosfiory lor a spsckied pariott of sims. 

C;ran:ma: ois.-moni 1 S06 x FHe-^!}«ag»i«^j-C<K.t« ; * Backup {Saok-U^Coipy-Ftfghis. Next-Set -of Bights)? 
Rt'^tere I Delots i Fstdor i Dir^siory {Nanri&:Hidft-t.i>asi i Hirfs - «emote){Pftrt&:H:de-!.«*aJ ■ Hid8~Rei?»Ser i-sfs 
a easegoty of tights- snvoivrng opstatiais.fef filo riBnagomani. such as ths making of backup copies to protect ths copy 
5® owner against catastrophic equipment tailere. 

Many software iieenses efio' siisoeoaynaht tew give a copy owner ■nsngntto maks backup coplss to protect against 
catashrjphic fallcre of equipment However, the ms^ng of uneoniroiiod backup copies <$ inhorsnily at odds with ths 
abllily to conSiol irsaga. sifico an iiccofiirolks backup copy cat? be kspr arrd then rsssored even after iho auttoixstj 
copy was sola 

rhs Fslo rna nag anient rights sfsable the making and rsstcsring d bs»cfcup copies sn a way thai r espects usage r;ghls, 
honoring me reciiJiremems of aoih she copy owner find the rights grantor and revenue rjwner. Backup copies of work 
descriptions ilnctuding usage right* and fss datas ear* -fee sent pndsr appropri&ie protocol mi usage rights contra to 
other docirrnsifs jepositoriss of scft:c:snlly high security. Fvrfbef nghls pecnli organ i;raiion ot dsgkat wotks mto totders 



11 



EP071SM7A1 



a; 



whien thsmsckrss are treated ae- digltai works %m wboss contents may be 'htcfeteri* from a -party sesidng to determine 
ins contents of a repository. 

» Backup To rrafce a backup copy of a digital worst as prosectors against msata tessuts. 

* Restore To resrora a oackitp copy of 3 dfgitai work. 

* Doiete To cssfests or erase a copy Of a d'driai WOrK. 

» R&isr To efssfSs and rsan>e ioideis. and to mow flies and fo&ers bsiwsofi ioidera, 

* Osresiory To hsde a Solder or sis ccofems. 

Grammar &k»«&f.; ; 50? "j^nivative-Works-Cotte; {ExtmcJ I Emi!*d '■ Edit {Process: Process-fDJ] {^ext-Copy- 
Rights : Stet-Sss-of Rights)" M» a category of rights im/oiving vtm am of a dipi-ai work to create new works 

» Extiaci To remove a portion oi a work, tot ihe psitposss of creeling a rssv* work. 

* Embed '5b include a work m sui sxistmg vsork. 

* Edrt To alter a dtgsai work fey copying, selecting and modifying portions 0? an ekisting digits: work, 

8 rammsr oiemeoi "Oonfigurstkffi-CedtR * tostsli f Uninsi&ii* sisis a category 0? ngpt* for instating and 
uninsUdtmg software on a repository nypteaiiy a rendering repository.) This woyW typSeaSy occur Sor ins <fts{atte!icn of 
a now type of ptayer within the rsncferaig repository 

* imstaii: 'lb irtstaii new software on a repository. 

» Unsnstail: To remove existing sofswirs trow a repository 

0^::--n : ,j.- oiemom f c09 -ffex5-S«t^of-R!ghls : « {{Add : Set-Of-Bight*}} {<Oetete: S*KS-«vRigf*ts)J £ Replace. 
ss Se*.©NSfghts$ {{Siesp: Set-Of-Sights})* daiinas how rights are canted ferwsne" for a .copy of a digital weak, if ths 
Ne)d.-Cq>y : -Rigfits is no; specified.- sse rsottss tor the next copy «re ttt* same as tiiose of mo currant copy. Oisierwsss. 
the sot or' r-.gbU io: ihe mxl copy car; be specified Versions of ngbis after Add a:o added to the cerrem set of rights-. 
Higrus after Deiets: are deie;ed from the curreot-set of nghss. Honfy ngb- nodes are hsred ssf-er Ooleto:. then aif versions 
of ngnfs with tnose codes are derated versions OS rights after Sepiaee subsume m versions of rights of )he same lype 
to the cutrsn? sot of rigiits. 

it RerPiatoifrg -Rights is not spocifiad.. mm f'ter s are no fights for Jh© origrnsi after ait tmn copm tcsrned out, 
if Rsreaining-Ricjiifj ss spsc:i':«d. thon the Keep token can bo usod to sirnpiity she oxpross:or; of what ngras io koac 
Prshifid A test of fight erxtes ioiiowiep, koep means mat ait of ihe vsrsiORS oi ttrose fisted rights are Kepi «t me fisrsajnsiig 
copy. This speci:ic;5t:on can 00 ovomdosn by s«&soqtisnt Dafofe: or Ropieco specsfswaions. 

as 

Copy Count Specification 

Fo; vahoiss !ra;rsac:tions. ft may fee dassrabie to pcovkSs son® iitnS as io ifre riembor oi s oop:es" of she work which 
may ba expressed sifnuttanocriisfy for ;ha fight, for :3>!ae}pis. it may b« desifabie toiimitttie nurnber o?cojJ»sof8 ;Sig:tai 
•so vsorK that may fee foanoo out at o -ims or viswoo ar & isme. 

Grammar sfementiSIO "Cepy-Coant ; « (Copies: pesfttve-iriteaer 1 0 f y«ismits£$)* provides a condition which 
datsrsas thsr nurnbe; of "copies ■ oi a woik subject to ihe light . A copy count can be 0, a fixed number, or imteitsd- The 
copy-count :& assoc^ied with each bgiu ee opposocf to tncra bosng iust a single copy-count tor the digstai work The 
Copy -Count for a fight is decremented each iime tiiat a rsgfn is exaresssd. Wiioa ihe Copy-Count eguais mto, the ngb; 
can an iongor be exsmsseo'. it tiro Ccrpy -OoDivi is not specified, tfte tislmli is 00s 

Consto/ Sp&ciiiciitkm 

Rights «f td fees depend m ganeiai 00 rigiits gian-ed by fha oreaior as wsii as faahei resfnettons, s'epo&ed by ta-er 
vi5 dfstiibeiors. Gontroi spcciffcatifsns dsat wrth iiite-aciions beiween thrr crsiitcsrs and thair dismbatofs governing the im- 
position ot funnor resiriotions and fees. For ojoampis. a disiribytor c* s digitaf work may not waot an and consijrasr ot 
a digitai vsrcsr k to add iees or otharvvisa profit by commercially ekpioinng ihe pMt&mm digsiaf work. 

Gr*:«rr«}! e:.^:eni ifji- -'Ccsn-roi-Spec : iComtroi: (Restrictfsfois i Un»est'ictab!«} {Urwhsrgs^bte t thargs- 
abte})" pfovicrss a condition to specify the affect oi irsagc rights and iaos of parents on she exercise oi the nghi A 
-s digrtai work is fsstrksabitJ li higtser level o-bioeke can troposs furmer r-ssmctions (time epee:t:eat;ons and access epae- 
Iticaiions) on She nghf: ii Is enresirictabte if no Jurihsr resmcilons can be imposed The rieiautt arrteeg is rrsstrlfrtablic. 
A right is an.chsr-geabts |i no more fees can bs Imposed on rha ess of the ngnt. it is cnargsadic if mors isss can be 
if:5posdd. The delautt is chsagsabie. 
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it is often desira»ie so assign a start date or specify some duration as to wh*n a right way be exercisse- Grammer 
Steven :51f; Time-Spec: *{{Rxs«Mm*rvat 1 Stfciifi^!r»$*rvaf i &tet*r-Time} Untlh Expftatjon-Dete}* piowies 
•s lor spscrfication of time conditions oo she essercisa ot a fight Rights aray fee granted for a specified t«a» Different kinds 
oi time specifications are appropriate for differ-erst kinds of Some nadis may be exercised oarinp, a fixecs and 
predetermined duration Son?e righEs may be exsrctsed far an interval iisaE sferis ihe iirsE time iirat she right is invoke 
ay some transaction .Somes rights may as exercised or are charged according !o some tend of metered am*, which 
may bs spiff into separate inten/sis. For example, a signs to view a pictare for m how might b© spat into sis ten mimite 
re vtewrrrgs ot four fifteen mwjte viswings or twenty t-hrse minute viewing. 

The tsmis "time* and "date" are need syoorsyinossiy to reterto a moment sn time. There ass sevetai iands of time 
specifications. Each specification represents seme station on toe iimes over which the eeaoe fight applies The 
Sxprrattorr-Data saecshes the moment a; which the usage tight ends. For exampre if the Expisation--0aie ts \3sn i . 
men the natti sods as the tirsi moment of if the Expiration-Date ts specified as "forever*, than ths rtgnts 
« are interpreted as containing wilhoct end it onfy an e»p\t$Xm csete ts gfven. then the ngrrt can be e,<siotsed as ofiert 
as desirae* ants! tns expiration data. 

8rarr;mar eissmenf ISIS TsxeddotervsS : * From: Start-Time" ss usm to define a predetermined mfervas iriat 
w irom the start time to sr* expiration date. 

Csiamatar eist?;e-n; 1534 "Shelng-fntervst ; :» 'otervah Usss«D«fst!on" la sand io define an incfstermirtaie (or 
"open") start tiraa. it sa-s iisTsits; on a eon{ir>uou$ psaso of isms ovof mkfr tha so^sras aro accssstbio. Th3 pofifxi siaits 
on the first aeesss md ends altor the dufatioa has esssed or tbs sspiratso:! daio ss tsached, whicnsvsr eomes tirst. 
far sxsmpiS; it sfte right givss 10 houre of cos'ttifiaoas access, the usa-diifKEsaf} vvosikJ bogia when the iirsi acoosa was 
mads sari m& to hoiire iaf«f. 

Grsmrmf eismsni tola 'JsMar-Time: » Tip-se-R^mainins; Remain tng-Use" is ussd to cioftnp a "msips- ttm.' 
2$ that is ; a ■oeasi.sfe of she cime mstt m fight ia fsotaaiiy oxa-oised. it olffesrs from this SiifJtng-iniasvaS st3«cteiic«i in Sha- 
ms tims that -no Oigitai wor :s sn ass need oo! s« ccntmuo«« h'or ©xsmpts. it t he r icshis guaranlse throe dsys of accsss, 
thoaa days could bs sprmti ovtl over s monttr. With ?hts speciiicatiop the rights can bs sxsreissd uni4 the :rteier time 
ss axtsaasted or tiro expiration date is reachei5 ; waicbsyer cari'saa iirst 

-se Rsmafning-liss:: Trras-Unit 
Siah-Tsajs Tims-f Jnti 
Use-Dpration; :-- Time-Unit 

Aii of the tints spassfissaicps fnciiida jims-upsi spec if iattioas in their Liifsmats insianiiafion. 

Security Glass snd AtithmtzMmi Spscfflsatkm 

Tt-s presori! inveriaoopiovides for various seen; sty medisnk'TOtoes introduced fnioa dsssnbatios-t ot me schm\®, 
; 'S;arnma; si^iisa; if-JtiVAceesa-iSpec ;"f{SC: Secisfity-Ciass; {Aathorizatsofi Aathori?atson ;O y } (Othof-Aathoa- 
•so izsllort: Auitw^ton^D") (Ticket: TtefesMD))" provides a means sor rosiriotsng .access w<i immmmm Access 
specifications can speciy a required security cisss for a repository to exercise a fight or a requires aathopzatiop test 
that mast be satisfied. 

The xoyvvord "SC." ss used to specify a mmtmwri sacufity ievei for the ispositories sn^oivos «* the access it "SO: 
is not specified, the fewest security Sever is aeceptaijte. 

The options! "Aettmrigaifca*:* H^ywsnS m r^sed to spsctty required aiifhor nations on the samss fspossfofy as she 
worrc The optional *©8»r-AatJwfea«oei; • keyword ss used to specify reqtmw aothop^attops on the otnor rspesttory 
sn tt"se irafisaciion. 

Tho aptioaai •Ttefefitr'' kssywar-o spec:t:ea tno iciantiiy of a tsckot fsqtirrod for ths transaction Afasnsaatirsn involving 
digrtai tsckois rrsust iocate an appropriate dtgsai isskst a9en; wtso csa *pmcx? or otherwise vacate the tictret beiore 
vi5 this transacroi can proceed. Tsckeis are cfescnbssS sn greater derail beicw. 

to a tranaactiosi invoivrop, a rspository arid a document ww. soma usaps rights may require That the repository 
nave a pahicrdar a^fwixatson. that tna ssrvsr havo some aafrioti^aStoft, or thaE soth reoosiio; - :es imm fpossiijiy dif- 
tetent} arrthorwaiions Aetbof ix;ii:Ofis themsaives arc digital works ihefo:naiiof raisrfoo to as» m mt\onm\m obract} 
thai can da moved hstweon repositories in she same manner as otPer dseliar works. IPcir copying, and tfansferoncs is 
subject to the same rights and fees as ottter dsgrEa; works. A repository is said to have m attiixjfizatat if that author- 
isation object ra contained within sne roposiiory. 

to soma cases, an aatborsatio:-: may fee required from a soarco other than Erie documsot server and rsposiEory 
An 3uit5ori;!atson object rsfarer?ced by an ApttsOr^atiep-iD can corttem dsgstai address information to be nsea to set up 
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a cosTssriyrrlcatior-is i«f«t between a rsposstory and sns- authorization scutes. "Sbsse em anasopoi.:s to pnoas nyrnosrs. 
F»f such access $8S?$>; the eon-smuflieafror; would mm so b» esSsSrbiisaeo and atnnofszsttofs oosamed festers ngtit 
cot-id be exercised. 

For one -ssrne usage riohts, a yarfam on this scherse is So have a digits! Sickci. A ticket is preesnted to a d^aaf liefest 
* agsof. whose type is spscthed on the ticket to mo sssrtpiest case, a certitted gerwfc ticket agent, avaiiabss or; si! 
repositories, is avaiiaPSa & 'punch* ttw> tsckss. !« csr-st cases, she tics-it way contain addressssie; srsformatsm for secatinp, 
a k spec:af ttcke; aqeffi. Once a iicksi has been perished, si ran no! Pe ased agasn for the mm kind of srsnsaciion 
warn (t is unpsjnchsaa or raSreshed « the manner oSi-ssrtbsd aalow.) Puacning artctudeg marking tft* with a 
sjiTsastarcp-Oi she data ana lima a was used. Ticks!* ar» digisai vsorks and can be oopiso* or transfSffSsS bsrwesri rspos> 
?<5 stories according jo those i.ssage sights. 

i« the cwneotV praSstrsd wjixKismen;. a 'punched* SfaHot became: 'utspuncbec? « "refceshed* what! is « copses 
«f extracted. The Copy and Extract operations save see date ancs time as a property oi tha dtgrtas iwket. When a licks) 
agent is given a ticket is car; sirepiy check -whothsf she digital copy was mads after- the Sas; Sirrse tm <t was punched. 
OS coarse. She digitai Sieket muss have ths copy of extract srsage nt}hts aSSXicneO snereto. 
« The capacity to enpencb a \tom is- soporier-i. in she Soiiowmg cases: 

* A csigssas work is circuissad as low cost witfs a femstattot) thai * can fee used ooty once. 

* A digiSas work is ciretssatod wish a ticket thai can s>s usee! ones so gsvs dsseounss on purchases oS otbsr «rerks. 

* A. digita! work ss cmMsxi with a ticket ssnciuded m the purchase pnee and possifeiy embedded « she works thai, 
ss tan be used for a rehire upgraoe. 

in sach d Shase cases, si a paid copy is reada cS tha digiiai mxk issiciudi!^ ttm ticks!) tno new amnst wxM expaoS. 
to get a Sresn {tiopurwhsd) tickes. v^eth«t the copy ;s<jiicf nas esad tha wxk or not if* corS rtsa! . ioanss'sg a work or sssapiy 
transferjing it to ars-othsr fsposiiosy shousd rsot rsviiati^s the ticket. 

ss 

Tt<8 hiising tor sse oi a digftai work ss faneSarrvaaSai to a oorfssrsafesai dissrsbsason system. Qmwm Siwtml let? 
»e-8p<vc- sfsch^sjierf-Dsscoui-Jti ?i$fji.i!i3f--i x !'3*-Spe<s ■ feh!-3<5«!$d-P««-Sp*e ! S&jrssup-5ssi3<5" p:Cv:e'a5 a ;a::pc 
sc osj optsons tor bsiisrig for tns rsss oS dspitai works. 

A key Saatese of Shse ssspprotsch ss sha cievaiopirsce; oS iow-ovorhssac; bffling for s^snsaetions m potantfasty snstsii 
amounts. Thus, it tiacorrsss fsassbSs to coiiact Sees oi only a Saw es:f us sach for sSrsoysands ot transactions-. 

Tha grai5i)YiardiS!ares5t:aSos baswean uses where the charge is pec ess ban those where is ss srsesercd by iha tkne 
«nit. Transactions ceo seppor! tecs that sne sjsor pays tc>r tsssng a cssgss&s work as vsoii as sncss'stwes sjard hy she ngPS 
grasitor to users to ciuHks thera to use or diss.nbste tPo digitas work. 

The op;io)>ai sehedsiisd dsscourss tefeis to tb© rest of the Sse speciSssaSiors-dissoursiiiig is ey a pssoerssago over 
tims. iS is is nos spscitied. mm thsre ss no sebsdaisd sSscoynt. Reguiar tec speeitseations aro constant o«sr tsms. 
Schsdassd tee speefteas.iorss give a schectsia oS dates over wttiah tha See specsSicaSiorss change Markup spsciiicassons 
are m®6 sn cj-biceKs *w adtisng a pasceirfage to she Sees sstrssady deing charged. 

0«««:^}< tioman; i<ji& ''Ssher.UiS^d-Disaoa.n! « (8«h«<s«5»d.Ois«o«ot: (lsm««Sf>»c ^n^nta^r)- A Scheci- 
ytsd-Discoesit ss a sssssiiiaiiy a sehsdsjied modifier of any other fee specification Sor th:s version or the nghi o! the 
digitaS work. ;i; does not seser to stsiidrea or parent dsgstal wortis ot to oitser versions oi tights.) is ts a m oi patrs of 
sin--ss arsd psixeatagas The most tacsm iime so tha m Inas has noi yet passed as she ot ins transac'son is the 
wsa tn aiSest. 1'Sre percer^age gives the dissoes'ss pescensags; For sxarnpie. the rsurrstser 10 tetess to a 10% discount. 
■*s Gsa-isnias f-le^^sS ■Regui»r-fe«-Sp«c. s * s irse«fi«ve- \ fP«r-Use-S?«« i fesered- Rsie- Spec \ 

S^S-Pdce-Sper; i Csi!-For-5»rltJ»-Sp«o j {tt\xr. ^orisy-UnSS Per. T-me-SpecHk'iSX-. ktoasyajrsit Ttos-SpfiO-) 
To: Acsoasfst-SD)" provides tor sevarsii hism oi foa speciSioasions 

Frsas f-ra pasd by the ca&yowi&mmftQ the rsvonsre -ownaf Pse: is spoctfied inessitsves are psM by tirse rgvsmss- 
ownst So ttte rssar it tf!»«ot!ve. :s specified. SS the fMn: spacsSscsstiQi) ss gftfea than there is a mcntmum lee to be sParqed 
vC per time -spoG irnit Sor its «ae. if she ^as: spesssicssttefi is givsn; shea itsare is a a^MsrasjsTi iee so be charged par sirne- 
eprxs for iss ess. Whan is tipecitied. ltoo»«ND sdsntsfies sne aooouat so which tns fsa ss to tse pases. When fn- 
sefstiva :s> specitisd. Ao&oun^SD ides^tifias tha account Jrom which the Sea ss to be paid. 

Grarrirnareiernent *P®r~Um»&p&s: *-P«sr»Usse; Sstersayisrstt" defines a simpte See sobs? paid every tirsse the 
right ss exercised, r'agardiess of bow twoh trrs;a the transaction sates. 

Gi=srf:rr!.:!f eierss-sct s i ;;>t "f^eiared-Bsste-Spec . fyte-ered: fvfcmey-Ufitt Per. T!!rja-Sp>3c'■ , ssttriines- a mete; ad- rase 
tee paid according so how tongths nghi ss exercised. Thus, rhetcas it ssskes So cosTipiste ihe Sransaetron deterrnseas 
the isa. 

Qrarssrv:.;;! ssa;v:ef;: 1S?S ^Besi-Priae-Spec ; ~ Best-Price: Money-jnS Max. feisy-tsnii" a rssed to ;;;e; :;y a 
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bsshprice shsti is etetsmiinad when tft&$gcoum is settled. This specification is to eoconwidctes special deals rsbaies, 
ana prtano tnat depends on xfatmstotxi sk» ts not avaitahie so ih« r«pes>tety. A8 fee spactftcasions can oe conifesaeo 
vain iiefcats 0!' airthcrizaiians &s\ ecwte sidtcssa that trx» consumer ts a wholesaler or -mat he ss a pr star fed customer 
of thai tf is seller be authorised in some way. The amoufn of nwsy m ihe Max: tieid is the- maximum amount 8rat tns 
•5 use wiii cost This is; shes araeufu thai tentatively debited imr< She credit sssvor. However. Vihsn the transaction ta 
uttmateiy reconciled, any excess mmm wff foe resumed So the ccoswnsr m a separate iransaction 

t<:«w-& etornent ;Cv: • 'Caii-Fcf-Price-Spec: - Caii-rw-Prie« :< i-> ^rwra to a 'Bssi-Pric^Spec" h that si !■; 
intendec- so &xsm?5od?5te easts where pt seas are dynamic A Csfl-Fof-Prfc* Spas requires a convnumcaten wm a 
cieaiar to determine the pres. This apt-on canno; he exercised if the reposatoty cannot communicate With & dsaie? a! 
» ihd t*ris that Jhe right Is sxsfelsed U ts based go a sseufe Mimsactiori whsteby Jhe deafor nnmss a price to exerolsa 
She nghi and pass-;s aiong a dsal cadibca.!e when b referenced or sneiuded m the bi:::j>g process. 

Gr.- : :n:^a- cicmcr;; U\>4 'Sflhedufsd-F-'ee-Swes: a{S«!herfl:i<^■.<Tlrt^e-Spe«rRs9:iiaf-F«s•8pfts)'')■' is esadtoi-ro- 
v:de a schedule o- dates ovef wnsch the lee sp&etitc&tions change. The tea specslicahon wSi She mast recent dsse no; 
w 8is futyt* is th;s one that ts m efiecS. Thss ;s tmm to out mora generai than jhe scheduled discount, si % nw 
« aeneraJ, bceauss It provides a raaarrs to vary the fas agreemem for each time period. 

i-raicrsa; .Uernent tSan °&askup-Sp«c; k Ivtaikap: pareersiage To; Account-ID" a- pa^ilm; tof add:n;; apar- 
caaia?;a so the fees aisaady beSng ahasgsd. For Kxampie. a s% mt&w means ihai a tea o; 5% of eumi.:is!sva tea ao 
fa? Wiiifes atlacatas to she ciistribtiiar A rnarkpp spacstieaisan can fee appksti so aii ai ths aths;- kinds at tee speciticaUons: 
it is typieaiiy asraa in a shell ptowtsd tsy a distfltsirEas: ti rsiars to iass associated wfth d-biocks thas ase pans oi the 
ttv wttm* d-'feonk This mJ^t na a convenient speeSicatsoa tor urn m saxss. or in Oistribasar m^tn^. 

Whan a mm requssss access to a <%qm vsortt, the rapest'ory wsii Initsasa various transactions. T"ha ccmbinatscth 
ss ct ifansasiiaas; invoiced wt8 depend on iae speelltnaSiorjs assigned {or a usags right There ara thr«e foasia types of 
iransaatfoos. Sassson initiation Transaciians. Financfa- Transitions ano usage Tranaac irons. Qanaiaiiy. session ini- 
tiation itansactsoris «s init«ted first ;o ssi«&ijsh a valid sassior; When a valid session is asiahlished, transactions 
cot responding to Sf;s vaaorss usage fights are invoked Finaiiy taqaesE specrtio s-arisactioas are parfoiified 

Transactions occur Oajwasa mo fsposiiorses Jons act-no, as a sarvsr}. batwsan a rspasitory and a oeeymen! pfey- 
st> back pfe^form s>.g. tor oxscuting or viawlng}. ostws-sn a raposiiory and a credit server or Patween s repository and an 
aa-hofffiattoa server Whan transactions occur fos-Voean iaoseihan ona fepc©l:ory. it ® assumeo that Shorn is a reiiab-a 
commimicaiion channal betwaen the rspoaltotias. For exarfiphs. this aouid be a TCPUP ciiannel or any other comaner-- 
slaiiy fwaisabie ctranriai 9m has owS-in capab:i::ttas for dctsesing and coi-raciinp trafiSirsisssais atrots. However ri ss sioS 
assayed that the conirri-itiica-ion chanaai ss secure Pfovisions for sacarity and pr-vaey ara pan oi she requirements 
-ts tor spaciying and wpienwrtfrsg reposriorses and thns form tha naacf for various transactions, 

TjafiSiicifsrs rcqal-a ;nat there na mm cosnrrisjnicatien tsijtwsan repositories CornrannKa-ian naiwaeo rcposi- 
•to tones ofX«fs in uni's tenrssd as rnassagas. Bacausa ;na carnniijcicaiion iina ss asscniaci io be enssacra, ai! commr;- 
oicatiOiis With rapositones sftat ara above the iovvast seacniy class a;s encn/pted atiiizmg a pubiic key encn/pisoi'; 
technique. Pubisc key sncfyptsof) :s a m& teowo tsehiuque ir; the Sfjcrypiion arts. Tha j©fm key rators to a numeric 
cods that is used w8h encryption and dscryption aigorithn-'s. Keys coma in pairs, wnsra "wririag Kays' ssre used ta 
anciypt data and Checking keys' 1 are ussd to dscsypt data. 3o;h writing ar;d checfeng keys my be pnbfo or pi ivata, 
Paslic teys ara those itsst are disirsonted to others Privafa Keys are mamtaii-ied in cont;«ence. 

Key managen-rsni and sacurlty is snstrumsntai in the siicsass at a puslie key anerypiioa syslam. in the cunaniiy 
pratsn-sd eiohoOsTsent. or;a or more s-nastar rspostess irsalntair; tha keys and create ths idsntifsoatior; csstriteaSss 
sjsad by the raposlEorses. 

VVhsn a sartding rspos«ojy trsi&mte a raassaga \ & % ?ecmm$ iapository. ttsa s$f!dm§ repos-ito;y encrypts ail of 
v<5 its data using tha pirbkc wrifing i4ay oi ihe iacelvlag reposliory Tha sending rsposiiory Inciudas its nasTie. tha nasna o! 
tha reasivsog repository, a session rdaniiiiar sech as a nonce- {described betem). and « rnsssaga counssf in cash ws- 
sage. 

in ttris way. tha sornrnuoisBtroo can oniy fee read (to a high probability; tsy ihe racssiving reposilory which holds the 
privsse checking key for docsyption. 'ihe snxlilary ctesa ss used to guard against various rap-ay aaaaks lo securiiy. It 
-s rriassagas over arrlva win the wrong countar or an o!d no-wa, the r aposlrones cars assume tha! sorrteor -a ss intadsr sag 
vstih cornn]:!.rniC3fion aad !hs Sransacticn i8rm;n;5ted. 

Tha resooeiiva puPls Keys tor ihe repositories to be used for encryption are obtaiasd in the registration ti^asaosion 
described basow. 
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Session imtMtw Tmmaeitem 

A usage- transaction s samea oat m a session mim$<\ reposiionss For ossga transactions involving, more Shan 
ens repository, or for financial transactions between a. repository and a credit server, a registration transaction re per- 

•5 formed. A second transaction tanned a logs'* -ransaotion. may also be needed to mmt& ths session The gcsal of ihe 
registration fransaction is to establish & secure channet setwesn two repositories wtu> knew eacb others identities, As 
st ss assameci ihat #ie commsmlcahon channel between the repositories is reilabfs but not secure, Jhare is a risk thai 
a non-repository may mtmre ths prcaosoi in order to gam iitssgitn-nafe access so a repository. 

The rsoteiration transsctson setwesn two repositories is describee! with rsspsct to Figaros 1 S srjd 1 7. The steps 

?<5 bessribed ms irorn if re perspective of a 'repository. t" rsgi&tewg Its Identify wilh a -reposrfory^h The registration must 
do symmetrica! so B» same mi of slops w«i be rspeahsd for f3pcssiusy-2 registering its identity wrth repository- 1 
Referring to thgere 5 6. repository- 1 first generates an encrypted registration identifier sisp 1S0t and then generates 
a registration message, step 5602. A registration message (6 corspnsed of art identifier of a master raposifoiy, the 
identification certificate tor She repository-? and an encrypted random registration identifier. The identification certteita 

« is wictypm by the master repository in its pwa» Key said attests- to the tact that the repository {hens mmfoty- '■ ) & 
a dona llde repository. The identiifcattoa certilicate aiso contains a public key for the repository the repoaitQiy security 
ievet and a irmesiamp (indication a twm after which this certificate is no longer vato s Tee regis! ration Identifier is a 
namoer generated by the repository tor !his registration. The registration ieteniater rg isotqiss Jo m session an<3 ss 
orioryptBci if? repository i's pt'mSs The rsgisfrarion Ideatllloi' Is ussd to irr^provs socnniy of aiJ'hsniicaiion t;y ds- 

28 tsottng csriasn kinds o? corrsrtsunscsitons basod aftacKs. Rsposifory- 1 thsn transmits tha rsgisirsiilon mossago to ropes- 
itory-2. step J603. 

Upco r«cort/s'ig the fsgtsttiitsof) rssssagij. ;oposifofy-2 daterrnitm II st t?as the nosdeci pridilc k«y tor ths rsBStsr 
roposiiory. siop ; 804 if ropositojy-2 doos not have the noetioo pad-rc koy to fiasrypi tha idorriiticaSron caitsfscafo.. -he 
registration fisaisaetion tarmiiiates in m error-, step 3 612. 

tesmrtmq that repository-;? has the props; ptrtsiir; Koy S50 dent sfssai son ersrtifieaio is dfjcrypEsd, step 1605. Repos- 
itory^ saves ths encrypted rogistration idon-iiisr step tS06. and extracts iha roposstory sdsntitier sfsp }60r. fm 
oxtractsd repos-iiory fcionttfior is checked a-3».:ni.-5 s "hotiist" 0; cornpion-iised cioewn^ns repostoiss. step s 608. in the 
cisfrsi?% proferrsd embodJiTiisni. oast) r>;posl!ory will cor-rain h-iofitsts" of oornproinssad repositories, if rhe rsposrtory 
is on Site "not-isr. the rogrstrtsiion transaction terminates in an arrorpor s-op 1618. Sopositorsos can be removed trorn 

st> ths hotii&s wnsn their certificates sxpiro. so that the iist doss no! need to grow wsthost bound. Afso. by keeping a snort 
s'sst o? hrsiissf certiticaros tnai ri has pr oviossly rss;?5ivod. a repository can avoirs ids work of acttiaiiy {ping ihf oagn idrs 
tsst. Thsse lists >voyld m encrypted by a trrastor roposstofy A mew vsriaitors on tbs approach to improve st?iC:oncy 
wocid have !he rsposSo-ws first axchanae jfcsas of nasnos of froiiist sorifticaios, yitisfrafsfy exchai5girsg orrly thoss issis 
thai they had noi provtousiy raooivsa. Tr;o "hoifiafs" are immtewS srxS dissribytod r?y i^aste; raposriorias. 

rrft Hofs that mhst than terminating in error, the transaction ooufd rsq^asi that another registration message de sent 
dassd or? an sdenhticatiori cepffscaro croated fey anothsr rrsaster rapositoiy. It; Is may be repeated until a sarisfactory 
identitication certitteeio is toand, or It ts dotero-iinsd that rrrisi cannot bo esfabiserisd. 

AsscsTiifip thai ths repository as noE on the hotlist, tho reposrtory identification needs to os vefitiec;. In other words 
iepossiofy-2 naerts to vaiidBts ihat ths? rr?r>osiiory on the other s?5d is rsaiiy reposittssy-'s. Th:s is :ormad psrtofmarsca 

•so tesiing and rs performed in order to avoso invalid access to the repository «a a socnterfoit repository replaying a re- 
cording o! a prior session Initiation between rsposltory-1 and repository-;;. Pehosmance testing is satiatsdby repository- 
2 genafstit'sg a pedorinaoce rnessage ; step 1603. The psdonrrsoc© message ;s>nsists of a nonce, ths names of she 
respoetitrs rapositorlss. the \stm and the regsiraiiOft identifior received from repository-! , A nonce is a generated 
massage based on sorne random and variable inforrsaSion {e.p the iims or the temper-aturs.; The notice Is used to 

*s cnoek whether repository- ! can actriaffy exnldrt oorroct oncryptmo of a ntsssago ustng the private keys it claims to 
have, on a message thai ,t has never seer; Betas. Ths performance message Is encrypted ^sme ths pedis key epecitsed 
sn ths ragistrahon message o! ;eposito(y-1 . The perlormarioe message Is trw;sn>rt!e0 to ieposiiory-1 . step 1510, where 
it Is decrypted by repository-l as>ng its private key. step toil. Repository-t fhen ohesks to make scrrs that the names 

01 the two fsposiiorttss are correct; step 1.812< thai the time is msim% step 18.1 3 &m that the rsgisfrafiori identifier 
5C corresponds io she one li sent, step tSH. tf ar?y o# fhese rests taiis. if;e rransaction Is torrnrrestsd per step 1816. 

Assuming that ths tests are passed- repository- 1 transmits ths nones to reposiion/-2 in theater, step 16 ■ S, Fiepository- 

2 then compares me. received nonce to the enema! nonce, step 1 61 ? . if they are not identical, the registration tf ansactson 
tarmfoatas In an error par step 161S If they are tfje same, the roglsiratlon transactsof} has successSuiiy compif;!od. 

At this point, assuming that the transaction has not terminated, tha repositories exchange messages containing 
sossion keys jo do used m alt cm^mmicatioris during the sessrost arrd synchronic Sheif docks, f rgere 1? sliestfates 
the session rnfofmatron exchange and ciocK synchronisation steps (again f torn the perspective -of repoeifory- t } re- 
ferring to Figure 17, retsository-t creates a session key pair, step \7Q\. A first fey Is kept privets and is ased fey 
ieposltory-l to .enctypt rnsssages. T he second key ss a public key need by roposiiory-2 to decrypt messages. The 
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second key is encrypted using the pubsse Ney of repository-:?, step 1 702 and is sent to rsposiiory-2, step 1 ?0& Upon 
recent. fSpasitOfy-S decrypts the second key. step 1704. The second key ts issed so decrypt syses&ages itvsubsequeni 
oommuoications. When sash repository has completed tots step. Ussy sre both axmum thai the other repository is 
bona tide and ihsti they are coeirTianieating wttn the on'o.inaf. Each repository has grveo the other a key te de used in 
•5 decrypting tettsw eorrirsunieattons Owing the session. Ssnes that key ts fisek transmitted in the putsMc key oi me ;e- 
eewwg repository oniy si mi m a&e to decrypt she key mkxi is oseo so decrypt subsequent messages. 

Alter she session loiorrnatiori re exchanged, the repossesses roust synchronies jheit clocks. Clock synchroncr-stlon 
ts used by the repositories ie astacitsh an agreed upon t*tse bass ?c-f the financieS records of »»ir mutual transactions. 
Referring, tma to Figure 17. repcstiory-2 Males ctacK synchronization by generating a time starry exchange message. 
?<5 step i?06. and transmits it to repository- step 1706. Upon receipt, repository-? generates its owe time stamp mes- 
sags, step 170? end naosnifis It back to reposttoty-2. step • 70S Pteposiiosy-f; doles she careen* time, step 1709 end 
stores too time receded irom repository- 1 . step 1?10. The current tone iseomperedio tne tiros received trorri repository- 
1 . step- 1 ?f V- The difference is then cheeked to see if ii exceeds a predetermined tolerance (e.g. one mmute), step 
1 712. a « does, repository-Si terminates she trensactson as -his may indicate tampering wtftt Ihe repository, step m§ 
« ii not !«5:Jo&tiOiy-2 computes an adjusted ism delta, step i?H The adjusted time deiia is the difference between the 
ctock time ot reposkory-2 and the average of the tiroes free? repository- 1 arid repository--; 

To achieve greater accuracy repository-? ear; requesi the time again up to a ilxed number of isrnes teg. five ikrm}.. 
repeat the dock synchronisation steps, and average the results. 

A second session initlatsor • transactor; is a Logm transaction. The Logsn transaction is used so check the au-ihennciiy 
oi a user requesting a transaction. A Login transaction ts paritceiariy prudent for the auiiioriitatson of tinanoiai transac- 
tions that will be charged to a credit server The Login transaction involves an interaction between the eses «t a eser 
interface aed tf-e credit sesves assccinted a raposrtoty Ttse irsforrentioe exsfienged here Is a ioojn stftng sepptiad 
by the rspossioty/cfeeii server to identify itssif so the asm. and a Psrsoaai ideritritcatton Motnfeer iP\U) pfrsvioerS by tne 
user to identity hirnseti to the credit server Sn the even! thallhe user se accessing a credit sewr oo a tepository diitereat 
item tpeone on wttich the use? intert;;s;;e resides, exchange of ihe information vsoeki be encrypted using the ptibSicattd 
private keys ot the respective repositories 

BHitog Tmtstictiom 

se 8:i!ing :'a«nsaciions ara coricemsd monetssfy iransactlons ^sih a credit server aiiSlngTrarisactions are earned 
oat when aii other conditions are sntjstsed and a usage tee tit required tot pranttrsg ;he reqiiest For tne most part billing 
transadiorss are weii endefstood iti the state of ihe ah. These Transactions are between a repository and a credit seivet: 
or between a orsdsi setvet and a oHIing ciearrighoese SrlefSy. the required iiansacttoos sncinise ttte Sollowitig: 

;?s * Registration and LOG iN transactions by which ihe repository and user esta&ilsh thek bona fides to a credit server. 

These transactions wocid be erttirsly Intef nat tn cases where the repository and credit server ase {rrtpiereeniert as 
a SingiosystssTi. 

* Registration and LOGIN transactions, by which a credit server e&tabtishes Its bor?a tides toe oHiinq cieatingiioese 

* M Asssgit'-ier! transaction to iisstgrt -3 charge. Tbe infrsrntai ion to this transact ion srouSct if sciijde a transaction <«en - 
•*o iifier. the identities o* the repositories in the transection, and « isss ot charges from the parts of the dsgitai work t! 

there has been any enescaf event in the trarssaction such as an iniencption of communications, tftst infom-iation 
ts irtctcded as weii. 

* A Begln-chargee tiansaction to assigr! a charge Th« transaction is much ihe same as an assign-tee Sransactio-! 
except thai It is esed for metered ese It includes the same Inioroiaifon as tt;e asslpne'ee Siarrsaciion as wets as 

*s the etssge see IniorriiaikMv The credit -sewer is then responsible tor rurtntrtg a clock 

» An £nd-eharaes transaction to end a charge for metered use. itn a variation on Shs approach, the repositories 
woeid exchange periodic charge Intorniatlon for each hiock ot time } 

* A r»po;1-ciisrges transaction between a peraenaS credit server and a billing elearinehoijsa. This transaction is 
invoked at teass onee per biiiing period, it is used to pass aiong intoiiTration about eharo.es. On detsit and ciedit 

5C cards, tbfe iransactim woutd atso be assd to update balance information and credit irrniis as needed 

Aii biitinq transactions are given a transaction ID and ase reported to ihe credit severs by both ihe server and the 
ci:en;.. This reduces possible bss of biiiing inioniisstion it orse of the parties so a t^jnsactton loses a banking card arid 
provides a chscst against ^upentsg with she system. 

Usage- Trsmsctims 

After the session iniiiatiori Sraf}sactiOi5s have been completed, the usage request may then be processed To sim- 
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pis'y the description ot rhe steps carried out processing a usage request, the term requester & used to refer to & 
repository in the request s*ods which is Insisaiir -g a rsesusst; and s»e terra server ss usod to refer to a repository « Ihs 
ser* mods sad which ccmisinsiiie dssifsddigMi «ork in rosny ossss seen as requests io punt or vie w a work, the 
requests arid server way he the same device and ths transactions described srt the fottowtng would oe entirety aiternat. 
•5 isi such tnstanc&s, cestasrt traosaetJQR sieps ; such as the registration ;rafjsaeik»v need noi be performed. 

There are seme corrnion steps that are par; ot me semantics of at! of fh© Msage fights ifi&sis&ctsons. These steps 
ate referred to as the- cornmcsn transaction steps. These ars two sets ~- the "opening* steps and she "casing" steps, 
Per mmptozfy. these are iietetf hew rmherfhsn rt-peat!!jgth«m si the descriptions of all ei the usages rights franis&ctions. 

Tran sac trans can refer to a part of a Oigjta! work. a complete digkat work, or a Digit?;' work containing other oigiial 
?c works. Akhoaqh not described in detail herem, a Transaction may ever; refer to a foidsr comprised of a psuraiky of digk&t 
works. The term "work* is nsed ?o setsr to what ever pettier; or sot oi digl-ei «o;ks is hemg accessed. 

Msny o? the steps nm& involve deiermiining it certain eoriokioos are satisfied. Reesil that each usage riotsi may 
have one or more conditions which must be satisfied beiose the sight cert he exercssgd Digisai works isevs pans and 
pans have parls. Different pans ean nave different nghts and iees. Thus, if is necessary to verity thai She requirements 
« are met for ALL of the parts that are involved sn a transaction For brevity whan reference ss made to checking whether 
the cghts sxistsnd oondltlosis for exercising ase sstlslled, I; is meant thai a;; sacrs checking takes place ior each of ins 
relevant pans of tne work 

Figure IS illustrates the initial comrnort opening and closing steps for a transaction. At ma point it is assumed that 
registration has occurred arid this* a 1rae;ed" sessio?i is hi araes. Gcri-jrai toats are tssis on liaago rgh-s associatod 
wm !hs foiPcr eooiaining the work or scam centsmiog io-dor higher in t he fiis system ai«ra>'chy. These fosts correspond 
to roquiremorks imposed o;i tho work as a coassqjjooce of sis basaq on ths psriisciar fspos««sy. as opposed io soing 
aSieciied to trie wosk kaeii. Raiersing so f sgase tS : pmrto ierhaiieg a asaga iransaciion, -he raqueaSer poriorais any 
geoeras -ests -hat are rep^ifsd eotoio iho ngh; assosiatsd with she irarssacten can fes sxercssed. stsp, 10)1. For ex- 
amprs, iosfaii. unins;aii and dsfeis rights may bo impiomsnted to roqusrs that a rsqcasssf nava an at^horwailon csrtit- 

ss jcaie bofors the right caa bo smromi. Anottier ex;5o;pie is the seqiiirsfner;; ;hat a dsgkal iicKrSba prsseoi anO punched 
before a digital worK may m copied jo a req^esSer it any of the gersoras fesSe Saii. the transaetioc is not initiated, stsp, 
! 802. Assuming ihar such roqulfed v%m ara passed, upon receiving tho usage request ;hs servsi gsneratas a trans- 
action identifier Sbai is used if- records o; repasts of tt!e SsarisactiOf -. step 1 SOS. The server then chaeks wheihs; tfje 
digifai work has Peon granted the right correspenoiep to tiie reques-eo iransactson. step 1804. it the dsojias work has 

se nor besn grantsd the ri.-jh; coffsspondifsg to the request. ?ha iransaction tenrirostss. step 1805. It tna dsgitat work has 
been granted -he repuesiod right, the server ;nea detar!0:ries if the vaoons cencii-ions tor exercising she right are 
satisfied. Tims based condihons are examined, slap J806, Thess conditions ars checkad by examining tho «me spec- 
if;£S5t:or; for the iha va;s:or; o- -he right, if any of the conditions ase net satrskad, the trarisaetior; ierrriinates nor s;ep ?80S. 
Ass-jsTsicg tnat the time nased conostions are sahsiieo. the seiver checks securky and access -conditions, step 

;k i 807. Srsch seciinty and access conditions ara satisfied if: t ) the requester Is at the specified secunty class, or a higher 
security ciass. 2) the server satisfies any specified aothorkahori jest and 5} ins reqoesfer sabskes arsy specifiisO au- 
Ihorkration tests and nas any required digstaf tickets if any of the conditions ars not satls?:eo. the franca^ ion tsrcnlnaies 
par step 18QS. 

Assarnsiig that the security arid access coed stone are all satisiteo. trus server checks the copy corsnt eondiikjn, 
•so step -SOS if the copy count eguats zs?o. then the transaction cannot se completeo and She transaohon tsrminaSos per 
step 1806. 

Assamsng that the cosy count does not equai mso. the sesver ct;ecka if the copies si use lor tha requested right 
is greater than or equal to any copy count tor the requested nght for isievant parts'), step 1809 if the copies in use is 
greater than or equai to the copy count, this indicates thai usage righis tor the version of ;ha transaction have been 
exhausted. Aceordintjty shes serves' termsnates the transaction, step 1805. If the copy eoant Is less -nan she copies m 
use for the transaction the transaction nan oontlnue. and the copies in use wooid he incremented by the number of 
dtgitsS works requested in the kansaciioa. stop tS-0 

The senref then nhecke is she digital xvorfe has a Loan "access rsght. slep tSit Thor'L.ofin'ancosa right isaspec:ai 
case slrwe tmmxQ rights rsiay be pi-esenf sveri thoogfi si! copies are toaried out it the digkat wor k has the "Loan" 
5C access: right, a check is mads to sea ii ait copies have deen te&fwd osi, step tStg.. The number of copses that coaid 
he loaned Is the sum ol the Copy-Counts for as: ot the versions of the loan right ot the digital work. For a composite 
wort* the roisvant figure ss the minima! suoh sum of each of the coniponenss of tha composite work. It ait copies have 
besm loaned oui, the re:rr;aininr.i rights are Oeterniined. rjlop 1S13. The reiTiainintt-r:gf)!sisdf5teiSTiir;ed from this remaining 
fights specifications trom the versions of the loan right, ii ihero is oniy one version oi the Loan right then the rfeter- 
rsiinatlon ss sirnpie. The rei^airang rights are the ones specified sn thai version ot me ism ugh;, or none if Remaining- 
rtighss: is not speckled, it there are snuiiipls versions of ine t.oan right: and ail copies of all of tne versions are loaned 
out, then the remaining rights is iaksn as the minimum sot {snterssction! oi remaining nghts- across ait of the versions 
o! tne loan nghi. The server then determines It the requestad right is in the set of remaining ughis, step f 814. if the 
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requested ngnf is not m rhe set of remaining fights, the- server wtp&mw me transaction, step iSOS. 

8 loan is not a usage nabi toe the dsdita! vsork er-sf aii copies have not been loaned oui or she requested apt t$ tn 
the set ot remammrj rights, sse conditions tor to® right am then checked, step t8i§. This innate various -tnaftciaS 
transactions between she repository and associated credit server. Further, eny metering of esage of a: digital work v*il 
•5 commence, if any financial transae-ion fasts, the transaction rem-snaies per step 1805. 

it should fee noted that the order m whfch the earttWtofts are checked nesd no- toitew me order of steps ? 808-1 Si s. 

At this point rigta specific steps are now performed and are represented hers as step 1St6. The tight speciitc 
steps are described m greaser detail bstow. 

The comrrsen ciosino smosaeiion steps are now performed. Each of ins closing transaction slops are performed 
?e t>y she server alter a success}*.!! completion of a transaction. Refer nng Pack to Figure IS. tns copies it; use value for 
the requested nobi is decreaienieo by She number of copras involved in the transaonon. step 181?. Next if trie riphi 
had a. watered usage tea specification, the server ss.ibsmcss me elapsed stmetroro me Rerra^mg-Use-Tfrm associated 
wth Ihs :nghf for evssy pari involved in the transactem. step 1S18. Finally i! there ate fee spectassons associated 
w«h the nqrst, ir;o server satiates End-Charge financial transaction t» eofitsrm barmf step 1S59. 

rs 

Ttaosmissrort Prof oca! 

An important area to consider is the transmission ot jhe dlojtai wens from ins server to the requester The trans- 
mission protocol described herein rsiers to events oecwnng afisi a valid session Pas been creased Ths transmission 
28 protocol mvst rwidSe the case of disruption in the communications netwssn She reposiiofis-s. it is assumed tfm inter- 
ference such as Injecting noses on ths cornrftunicaiion ctiannet can be detected by me int egriiy cnecte -e.g.. par-sy. 
cheekBuai, etc:) itmX are busts imo ttre tssasport proiosei ersd ese rso; dissesseci in deiasf t-ersin. 

The asideffyi?^ gcsl in tno transaiissson preSoeoi is to preclude cahefa taifoiB modes, sweh m ataficieas or aeoioenta; 
snteffereacs oo ths communications chanasf Suppose, for exampis, that a user suite a card *:ih the credit server at 
a specific time arsar iha end oi a SiaasBeStsa Thea; ebon id not be a vulnerable time ei whtcn "paiiiae the card* caaees 
me asposiiofses so faii to ceaectiy acceaa- for the aymhe;' o- oepsas of ths work thai have bsea created Restated, there 
ahoaid be- no tiaio at vvbieh a party can break a connection as a means io avoid payment after using a bigftai work. 

if a Siaasaction is intefrapiea (aab iasia). both repositories restore ttse dfgiSai works and accounts to ihass siate prm 
So the fa-iara. madeio reaoros of the tetsure iieeis. 
ee Figrae : 9 s a siare diagram showirip, s-eps -n the process of transmit-iris. ioforrnafion dursnp a transaction. Each 
bos represents a siate tsi a repo«itory sa esihoi the server asoda iab£5ve the centre! dotted sine t aOI ; or «me rsquastes 
mods s'be-ow the dotted line i 90f Solid arrows stand forfransSions botwsea states. Dashed a nows stand for message 
comfneossaisons oeSween ths seposaories, A dashed message arrow pointing to a solid transition arrow is imetpreted 
as meaning mat ths transition ttsum piece wben she meseags is received, uniaboied transitton arrows lake piac-s 
uneonditionaiiy. Oihsr labeis on slate transition arrows describe conditions that trigger She transition. 

Rsiernng now to Figure 1$, the serves ss iniSfaiSy in a state 1302 where a new transactor; :s IfBrlaied via start 
message f SOS. This message Sneiadss transaction information inciting a traasacfloa identifier and a cooal of ths 
biooks of data io be transferred. The requester, initially in a wait state then enters a data wait state 1 305. 

The server enters a data transmit state 1308 and transmit* a Stock rs; data -90? and -hen emers a wait for ac- 
•*c Smowisdgemeot stale 1 908 . As She aafa ts rscesvsd. ths requester enters a data receive stale I90S and when ths dais 
bioeks are complete!/ received it enters an acknowiedgemsn; state s 910 and transmits an Acknowtedpemens rnessape 
1911 lo ihe sstvet. 

if there are more blocks to send, the server waiis unhi fecestftag an Acknowisdgsrnent message from the requester. 
When an Ac knowledge n;eni message :s receweb it sends the next biock to the requester and again waits ior ackrsow!- 
edgemarji Ths requester aitro repetris the same cyois of siates. 

It site sea/s! detects a coir.mjnieations failure before ssnping the sast clock, si enters a canes nation slate -912 
vshereia the transaction is cancelled. Similarly rf the requester detects a commenicaiions iaiiute belote recesving the 
last biock it a otsneellaliea slate 

li shsfe are no more blocks mend, the server commits to ths transection arid warts for She fm\ Ackftowiedgemeni 
iristata 1§t4. if fhara is a aornmrinicaiions -siiut e bsfore the server receives iha tea! Acknnwiedgerosnt rnaasaga. if. 
still comi-rif-s to the transassiosi but ineiadeea report about the svsi-f to its etsdii server in stats 1 9 5 5. This report serves 
two purposes, ft wiil help ieoiiimlue any $mtm by a ueet of mmg been PilSsd tot receiving digital works that were not 
compleSely recetveb. Also i; helps So idenfrly repositories and oijiT-mur-lfxitians Unas thai nave siiepiCiOiB paffoms of 
use and inserrupsion. The server sherr enters its completion state 1916. 
•ss Or? iha ■ eqijester side, whas? fhsie a; e no mo; e blocks to receive, the requester commtts io the transaction rn state 
1917. it the requester detsoss a commanioetians laiiurs ai this suste. it reports the fafinre lo sis credit server m stale 
l &vS, hutstiii commits iof hs sransaction. When ti has commissed. it ssndsanacknowledgeinsni message to the server 
The server then enters Its compietson state t9i&. 
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Tm my property t» that bosh thrs servor and- the requester eancsf a transaction it it $ interrupted Perots al! ot ths 
tfata biocks are deisvemd, and commas to « if at! o! the data blocks have osert detrverad. 

There is a oossm&tof that the server ma nave sent ait of «ss data stocks (and commnted} but 1h® requester Witt no? 
have rscsivsd as of ibsm and wat canoes' ths transaction, in this oass, both rspoattones wits preswrtafety' dsieei a eorn-- 
•5 ntanleahoos f&iiute m\d report tt to tnssr credit servor Tim easa wit probably be rare sweb a <s«ps;-nds on very precise 
tsmingof the cemmi:nKatsons fasiuro. The ©r?fy eertsaqtmrtcs will he that th3 user s! me requester repository may ura- 
tes request a rs&nd irom she credit savess - and 9\b ease -or thai iefnnd wiil be doeumsnteiS by legoris 05; both 
repositories 

To prevent toss a? cfsxa. She server srt-xsid not deists sny transferred digita! work until receivine: the tinai acknowh 
?a odgemeoi rtom the rsqi«?sie>f Stf :t also should riot uss the fiss A we!! kno^vrt way 5o dsai with th>s situation is cate 
'Two-phase commi!* or ?:P0. 

Tvio-phsse commit works as foSiows. The test phase works ths s*me as tne mstnoo described aim. The server 
sends a" of she data so She requester. Both reoosrtoros mark transaction (and appropriate sites; as uncommitted. 
The server sends a reafy-io-canmii message to m tsqusstsr; The requester sends bade an acknowledgement. The 
« ssiv«! men commits sfd sends tits requester a commit message. When the requester receives the tc-mmi) message, 
st commits the fete-, 

it shere is a oomwtm&sm future or other the requester mm checs sack ytm the server to oaten-nine- she 
status o: the transaction "The server has the last word o« ihis. The requester may have receives aii ot ins cista. fout rf 
st did not get She sifist msssage. * has not coromstJsd The mww cast go tshead and datets fifes ioxcept tor transaction 
fasotdss ones a ccrmtits. stnes ths titas are known to nave »«ss« tusy irartsmstisd bs?ora startina itis 2PC eyefe. 

There sre vsrtations known tn ths ah vvhsch can bs used to ash lave tf >s same offset For axarnpts. ths server couid 
use an addiisorsa! iavol of ss'iciypiton whan transmitting a work lo a ci»mt On<y a'ia; tho cisartt ssnds a ntassagra ac- 
xnowiadQing receipt doss « sand the key Tb* client than agrsas to pay tar the distal wans. TTsa point o! thss va-natton 
;s that it provides a ctaa: aud:! sras- that tne ctscnt received ths work For trcstsd sysisn-:s. hows/ver. this variation add& 
a tavei of encryption tor rto tml gam ;n aceoant:ats)if;y. 

The transaction Sor specific asags sights ars now dlsecsscd. 

Th* Copy 'Transaatton 

$%> 

A Copy transaction is a tsqursst to make orja or mesa independent <sopm of tna work mih iho same or iesssr 
usage rights. Copy differs fromtha s^nscrlon right dlssussad iatar In that ji refers to entire digital works or sntsrs toidsrs 
contalnsng dsartai works. A copy operation cannot be used to remove a ao'tron of a dfojiBi wosk. 

;k * Ins requester sands the server a messags to tnliiats ths Copy Transaction. Tiits a^cssags Indicaies the work to 
tss coplod- ths version of the copy right to do essd tor the ssansact:on. the destfriafsor; addtess *£mna&m {iocaison 
in & tofder > tor piacsng the work, the tsie data for the work ;inoi:.idia<g sts SiZ-sj. and ins number of copies requested. 

* "i't-s rspcsiionss pssior;n the corrsrsors oaenlng tssnsactior; steps. 

* Tha server tmnsntits the reqsjesteS rrontonts anrf data !o the aiiar;; astoorrssng !o the transntBsion proiocrs!. if a 
-ss fvlsKt-Ssi-Of-R^his has been provsood sn the vsrsson ot tne nohi. those fights am iransmittso as thrj rsgnis tor ths 

work. Otherwise, the rights ot the orsginas are srafissrtsttes. in any svsnt, ths Copy-Coum frsld tor ths copy ot ths 
digstai work tsssng tront ngh; is set to the onmber-of-copios requested. 

• Tha ;egcest8< records the work oontsnts. data, arsd usage nghts and stores ths work it records the date and tsme 
tha; the cony was made in ths piensrttes of tha digrtai work. 

*s * The repsossionos prsrfonTi the contfnon ciostng transaction stops. 

The Transtet Ttaneactfon 

A Tsaostet ttmm&m n a request to move oopsrss o! tha westk with the mm or iessef usags- rsgtifs to another 
sa mEXssitorv: In contrast with a copy transaction, this rssuits in ramoving the work copses from s'tse server 

♦ Tha reqoesisr mtm ths server a message Jo soitists !hs Ti'snstsr Tsansactior:. "this snessags sndlcatas tfia work 
Jo da transferred ths version of the transfer siojtt to be used tn the ttansacttcm. the r3estsr;;jt:Qn addiass information 
tor placing ths work, ths fits data tor tne work, and ;no ns-imoer of copies involved. 

♦ rps repositories perform the eorftn-rar; opemng !ra!5saction steps. 

* Tha server transmits ths rnoLissten conlcnts a«d dattJ to the requester according to the irrrinsreissfoa protocoi. ft 
a Nssxt-Sst-Of-Rigslts has Seen provided: those rights are transmitted as tha nghts for tha work. Otherwise, the 
rights of the original are tiansmrtiad. tn ettner case, ths Gopy-Count fsatd tor she t;«nsmrtted nghts are sat to the 
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r: urnhe r -of-coasss rep \> sstsd 

* The reqtiosisr teaoids to* work contents dsia. and us>ag$ n'ghis and stones She work 

* The ssmf dsecsrosras us copy court* by the rsumeer of copies snvoiysd m ths transaction 

* Ths repositories pedonT: the ccsmm closing transaction steps, 

* i! ins nutnbai of copses remaining in she server (& now xero. « otases the draital «sxk frets ftss tnernory 
The Loan Transaction 

A loan frssnsaetion is a mecfr^srn for loaning copies of a digital work. Ths maximum duration of ina sao is de- 
tefrninad by m interna! pmarmi&s of the digital work. Works ate automatically returned after a predetermined 1km 
period 

* Ths rstjisestef sends ths setvet a message So irwtrate ths Ttamfsr Transaction This srso&easo indicates ths «otk 
to fess i«jrs«td. ths version of ths tear tighf io used in she transaction., lha de-sltnsfion adoress jrttof mason ior 
placing the work, the numbst of copses involves, fhs fife ostta tor th<5 work, and the pmod of the ten. 

» The server shacks the validity of she teqaestsd torn passed, and snds w&b at; srrar if she period is no! vaitd. Loam 
lor a loaned copy cannot extend beyorxs w p»nae8 of fhs- ortgfna) toen tc ths server 

* The repositories perform She ©owners open-ap. transactors steps. 

* The server sanerrsitSiths repassed contents ar-;5 data to the raqussier if 3 Nsxt-SsJOf-Rsghis has; iseen provided, 
those rights are hansmritsd as %m ughis tor ths work. Othsrwrse, the nglits of the original ate h^ns-rrtiitco. as 
modified to refect She loan parted. 

* Ths rsqeeslet records the digital work contents, data, usage aphis, and ten period and stores ths- work. 

* TM server updttis« the usage rights information m the osgitai work to relief the msmher of copses ioansd out. 

* Ths- repositories perform it® comnrson closing transaction stops, 

* Ths satver updates- the ue-aqa aphis daia lot the drptoi work This may pf eciade yse s# ths worst untit it is refarned 
tfom fas loan, m« os«f on ths roquostsr ptaticrm can now ijss -no rransfofrad copies o? the dtg-ia:; word. A nser 
accos&ir;g trio original repo&:tory cannct ass tho digits* A'«k t;nieae thato ara copies re-rnatriino Wti».t hsopsns 
next Separate or; the order ot evsnts in ims. 

Case 1. if ths time of the foan penod ts not yst sxhatistsd grtd ths rsquoster sends ths repossory a Rsium 
spaststjga. 

»• Ths ratutn rasssage s'sciaPes the iaqnarjisr identification. ;jnd the transaciion iD. 

* Trss ssrvw «ecre«)«i.-tts ths cosmos* -us* ttssd fey th« number of eeoiss sr«t were -atajneci nfthenksmfost 
ot di^ifat worke -atarrj-sd is 9re».;e; thna the rwrrsbs' actuatiy oofrovasd th;S >s treatsd as ».a orior; This 
step may now mSss ths -*ork avaitabia a* ths setvar tor othsr asers. 

* Tho fsquasfsr deaofivai-ss its copies and removes the oontonts tfom us memory. 

Cass 2 if this time of the tcan p$tit;d is isxhaasted and ths requester nas mt yet sent a Rstctn trsassapas 

* The server docrsmeats tho eopses-ia-eso fseid by ids number digital wsrks that wero befrowsQ. 

* Ths tequeste; motmSocstty dea;;!::va}as tie copse;; of the dsgstaf weak, if tstrntrsafas sii ctarent ases and 
erases fhs o':g:tai wori< esp:as fiorn msniory Oas quashsn ss *ny a ^eqnestsr wrxsid aver remrn a work 
sarite; than ths penod ot Sha fcan. sstioo ti woakt do returned autonsaiioaiiy afjy>vay. One reason tot eatiy 
rmm <s- thaf thare a;;iy tsa n rnstsrad tea wh:t»; d;P:arrninrss fna nasi ot the ioan Rstum^g snhy may 
tsciuce thst fee 

The Play Transaction 

A p:i;ay trant^jatfcn is a request to use the contents ot a work. Typ«»!iy,. to "play'' a work ia to sandthe dtgital watk 
through sonta kind of srartsduear. such as a speaker or a dispiay dsyics, The rsqnesf impliss the Infarttton that ths 
content* W81 not do corn;rieri««rt8d <Si§8aily to any other syststn. For example, they will not be sent to a printer, recordsd 
on isny diigrial medk;m r rstrsinstj after She transaction ot san; to tinafhet rt-po&ifory. 

This tgrrri "pfey* is natural tor SKampise iike playir-ig rnasio, playing a movta, or pitryipg a vidso gs&tna, Ths ganersl 
few of piay m&nm that a "playat" is asod So use tfio dlgilai work. tfmm&. the i&m play cwsrs alt i-nadia and ksmfe 
of rhoprdioas. Thcs onh vsohid "piay* a digifal work, manning, to render it tot reading, or play a computer program, 
meaning to execute if. For a digifai tiakef the piayer t*oaid Pa a digrrai ticket agent. 
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* Tps requester ssntfs ths serw a message to initiate the play transaction. This massage indicates the work to be 
p!sy$d. She version ef ihe piay right to be usad m M tesns&etioa ths identity «' 5hs pleyet being use4 &m tne t(ie 
date for the v*ofK. 

* The esrver checks «he vskdiiy of the-playet fcentUScstfon and tns cotrrpalibiisiy of the ptayar idoniificaiion with the 
•5 player spaelikjntion in the fight, if ends with art sttot II these at® not satisfactory 

* The repositories perform tna corwiors opting transaction steps. 

* The servsr and requestsr read are> wrfie the blocks ot da«s as requested by She piaysr according to ths transmission 
ptoiocoi The requester oieys tne wo?k contents, using tne player. 

* When the player is finished, the pisysr arxt tne requester remove the contents torn tnef? memory 
f« * The repositories perform the common closing tmnsachon steps. 

The PrsnS Trans&ction 

A Pm ttansaetsors is a recfuest so oWsm She contents ot a worts for the purpose oi rerxsorifto, ihem on a Winter.* 
« We use the t€ffrv> "pflmer" to locfccfe if is common case oi wuitop. with ink on p&pef However, the ke>' aspect ot hptintiric/ 
m our use c?t ths term *s thai ri trafkss a copy o! ihs digr-sl work is?: a place outside o? the pretecboff oi ttsags rights. As 
with m rights, this may require padlcuiar atsiJ-sofsatKsn certificates. 

Once a dicsta' work s$ printed, ihs pubiisncr and year are bound fey whatever copyright laws sre in effect. However, 
printing moves the eorstsnts outside the oonisoi oS repositories. For exampte. absent any other enforceoien; rnsehs.' 
rasms, ones a dlgitst; work & printed on paper, a can bo copied on ordinary photocopying, machines without intense; ton 
by a repository to ooiiect usage fees. I! the primer » a dsgist: disk is pemiiited, ihen thai diqSsi copy ® oUiStdc of ihs 
cofisroi oi usags fights. Boii'i -hes oreaiof mti tits ttsisr ki?ovv ih:s. aiihougts )he creases doas ftot nsscessaniy give iaosi. 
consent io such eopytriq. whinh may violate copyfight mm. 

ss « Tfio fspuesfet sefiits the setves a sneesage so initiate a Print ttsnsactfon. This rnessaga inciieaiae -he isjssrk to trn 
piayea. ?he tosntiiy of She pnmt »eseg used; tn® tffs <Ma tor ths work, and the nurs&dref copiss m ihe rsquaeL 
The soever c?;ocks ihe validity of the fmmsr idsruificaiiori s;>d tha ow^st&ifijy oi if;o pfiotes identiticaiiOi-; «sth ihs 
prifjief spedlleahoe in ttte right. It ends wfiit an srtor II these am net sasisiaeiory 

* The -apoaiScfiss psriorm the nommoe opening irensaciion siops 

* The server transmit* ekxks ot data according to the tiansmlssioii protocot, 

* Tns fsaeesifSf prlfits the work . confeftis, using ihe prinie;: 

* Whan ihe printer Is tsnienod. iha printer arid the r&qyeeier remove ihe contents from their memory. 

* The •aposiioiies perform ihe eomir:on eioatnp transaetlon steps. 

-ts Th« BaeSiKp Tramsaciion 

A 8acSn.jp ireasaciion is a fcqyesi to make a baefcap copy ot a dicsia! work, as a protauicn agamst mefJta iaifi-a. 
in ihe contex; oi ieposiiorlos. sacuro Packwp copies dltter Ircai other copies if; trues ways. ;1 ; they ate mstdo umSer 
iw eonhoi oS a Sisckep ttansaniion ra-haf tf;;sn a Copy iianstrcttcif;. {_2> they ifc nor coiJnt ae regettir a>pres. an;t (3} 
•so thoy ars noi usafete as rap.piar copies Sonsraiiy backxsp oop-as aro enorypiop. 

Although feackup copies may he transferred or copied, depending on inesr asssgnsp riohis. tJie oniy way so make 
thertt usehji for playing, printing or emesdding ;s io restore thorn. 

The output ot a Backup opsraiion is coin an encrypted bata fife that contains the contents and description ot a 
wrk. anO a tesioratlen flie ^iih ati encryptieri koy tot restoring tiie eticrypied conionis. in tnany oases, ihe enc;ypieb 
d;Se riio wowio have ngttts for "pflnttng" si So a mn outside oi ihe protection system, toiytng jusi on Its encryption -or 
sscarity. Such tiiea coutd be stprco anywhere that was ph^sicaily safe and convenient, ins restoration im woutd bs 
held ir: the reposSoty: litis tllo is tiscossafy lor the rostosatroo ot a backup copy ti may have rights for transfer bei ween 
fopositofles 

5P s The rsquosrer s«snds the sewer a massacta to inrtsaia a bae-ttrp iranstsction. Thss message Indicates ihe mxk to 
be backea up. the version oi tns backup npht so be useo in the transact©:-}, ths pssilnailon address littormaiion 
tor piscina the dackup copy, the hie data tor ths work. 

* The raposiiort.es pedorm the common open;np, ifansaciion sseps. 

* Tne soiver transiTiitii the repussied contents and de'a to she requester. !' a Nest- Sot-C»t -lights has been provided, 
ss iitose ngitts am tfansrttitted as the rights lor the work. Oihorwrse. a set of oetauit ngnts lor backup hies ot She 

ongrnai ttre transmiited by the server 

* Tits requester fecssitfe ths work contents, data, ahd usa^e fights, it insn creates a ons-tims key and encrypts the 
contsfttsiiis. it saves tne key information m a restoration f«& 
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* The repositories pesioms <h« common c'osing transaction steps. 

In some- cases. a is <xxmnw&"& be able to archive ins largs, encrypted contents hie la secures eliiine storage, 
such as a oiagneto<iptscai storage system or niaosistta tape, Tnss creation of a non-repository archive tiia ss as secure 
•s as the encryption process. Such non-repository archive stea&ge is coosidaisd a sotm of *{jr»«tio§* and is corftroited by 
a print t^»{ wart a specified btirciiwe-grinter." An archive-printer device is prearas-saYsed to save the maypted ccsrtesftfs 
ftte (Jxft not the sJascdptfon fsiet offline »r» sod* a vmy that is can be ietneved. 

Th§ Restore Transaction 

A suasions transaction ss a (sq«est to cmmt an encrypted backup copy of a itfigt&i work «to a usabte copy A 
restor o operation is intencsed-to to® used to compensate to? e&tfsstrophfc msc»s tetiurs-. Like all usage r ignis restoration 
rights can wduste iaes arid access lasts inciuding authorisation cheeks. 

w • The requester sends ibe server a massage to initiate a Res:ore Iran sat! en This message irtctscates ihe work to 
be festered, the version d the restore rsghi fof the transaction, She destination address fofortrsistion for piaeing the 
work, ma the iiia data tor the work 

* The server verities that iris contents tits is svallabie {is. a digital work corresponding; to ins request has baan 
backed-up.i it it is not. st sndc Ss&'tssctsa) wth an error 

Sv * The repositories pBrtonv. the cormxm opening transaction steps 

* The mm retrieves the fcey from 5h« restoration fife, it decrypts the work contents, dais, and usage rights. 

* The server transmits the raqaesled ■conisnts and data to the requester accord^ to lbs transmission protocol, ii 
a blexi-Sel 01 slights has been provide«. those ngnts are transmitted as Shu nghis tor m work Othsrwisa. a s«t 
ot cfefaufl tights for backup rilss of the otiqmi ats transrvi«isd sy itis setvsf. 

* The fsqaestef sioses tt;a digifai work 

* Tns rspesiiofiss pertornr- ins- corfsfrsofs ciosing transaction stsps. 

T,H« D»S«te Tfaossctsen 

st> A Daiste ifSfhsaction dsiates a ciigitai work or a number of copses of a digsiai msk from s reposiiofjr Practicaiiy all 
digittsi wks vjouNJ hava deiaia rights. 

* The iaquasior sctrds me sotvat a rnessaga to ii5sisaie a deseto trafrsaction This rt.assaga indicates tha work io ba 
rjistetact . lbs varstcn ot the <$mi* fiaht tor shs trartsaction 

;k * Tfvs rspoaisorias psrtorm the eommor: opaning traasaction steps. 

* The server deiaios the lisa, erasing ii irotn trie f:ia system. 

* The reposstortss perfori-n the csimors ciossn^i ttansaction stags. 

Th© OSfecSory Transection 

A Directory transaction is a teqyesit for intormation about foiaets, digitsi! works, aad their pahs. This amounts to 
tougbiy fa* sense idea as preiaction codas in a caoveritionai isje sys-sw tike TENEX. excapi tttat it is gonssairssd to 
the {ut! powar ot tho accoss specifications ot the usage fights language. 

The Directory transaction has the irrsoohant rcfe d passing aiorsg desc-iptions ol the rigbts end lees associatso' 
*s with e bigitai sstork. Whrsn a ussr wan!s so exercise a right, Ibe asar iriiahaca at his rapesitofy irnpiicitiy makes a directory 
reqass; to dotsfmlne the vsrsicns oi the right mat ars avaiiabie. Typicaliy tbass are prassni&d to the user - such as 
with different choices o! hiiiing for exercising a right Thus, many ciifeetosy transacttens are invisibie Io the user and 
are axsreisad as part o? the mmi process- of exarcisiog ait rights, 

S5 » The r-3qtiestaf sarrds the ssrver a message to inSjate a Directory Sransaciion . Thss message indicaias the tile or 
teldar that is the root of the dirsctory request and Ida version of the directory right ussrj tor the transaction , 

* the sarvsr veriiias that tha intoriaation m accessifele to the requasier In partiouiac it doe* not return the nances; 
at any Sies fbat nave a HiDE-ki AiviE siains in tbesr direciory speciiicaiioris. and it doas not cstam the pads c! my 
tofdofs or dies that hava WOE-RWS in sherr spsnitiaation. if tha information is aot acnessibis: tha server ends 

se ttra ttahsactiori wiih an etrof. 

* The repositories perform tha common opening transaction steps. 

* The server sends the requested data ta:?he requesfsr aocordlhg to tne traesfnlssiort protocol 

* The requester racards Jhe data. 
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* The repositories psrtoms ths wworY closing transaction steps. 
Tli* Pc-idsr Trsnssctkm 

•5 A Foidsr isansact iof ■ is a request so amis o; rename a iokisr, or to man* a work between ioiders Together with 

Directory rignts. Polder s'scj^ts emits* m degree to wniofc otgmmm et 3 repository est* fes accessed « mocf&tsd 
t«»ri another repository 

* The requester sends She- server a message to legate & Folder transaction, ~nis message indicates, the 'cider that 
?<5 is the root o! the solder request the version os' the folder rhght lor ihs transaction, an operation, and dates- The 

operation am deoneol ami®, rename, mci move fife. The data am tftospecKiestsons required for the operation:, 
such as a specification ot a ?oids;' or cfcgjjai work snot a name. 
' The repositories pertorm the common opersinc. tiarssacison steps. 

* Th« mtmr performs me requested operate! •■ creating a tofeisf. renaming a iokier, or moving a work aetwssn 
« foiOsrs 

» The repositories perform Joe common closing transaction steps. 

The Exfrae* Transaction 

A extract :s'?tf}3&cison is a request So copy a pari ol a digitat work and to ereste a new work containing it. The 
extraction operation differs from copying sn that st can be csed to separate a pan ol a digital work front d-dlocks or 
shells that place additional restrictions ot fees on st The extraction operation diasrs from the edit operation in that is 
does r?ot cnange She contents o? a work, only (is smbsoding sn d -blocks Extraction crsaiss a new oigitai work 

£■$ « The fi3Cj«83St«f ssoeSs the server a moorage to initiate an Extract iiansaction. This massage indicates the pars oi 
tbs work » ne sxtracteU me version ot -no extract right So be asso in sne transaction, the destination address 
information tor planing she pars as a new work, She rise data for she work, and 'he number of copies Invoked. 

* The repositories perform the common opening transaction sieps. 

* Ths server Sransmits sno roqiinsied contsrris sod data So ;oo roqyestor t-ccDrding \o lhz kmm<<$&>m proioco'. if 
s>? a Nexi-Ssi-oi-Rignis has seer; provided, those rights «rs tmrisniitteo ds ths rights for the new work Otherwise. 

Ihs- nghis o; snooflginaiariSiransrTilnod. The Copy -Conn i tie id Inrtnis tight is sot to ino nurribor-ol-aopsos rap^asSod. 

* The requester records the ooments, data, and usage rsgms ma stores the work- it reoords the oats and tirne that 
r;ew woik vsas srado m the properties ol ihs; work. 

* The repositories perform ths common closing transaction steps. 

Af? stebed tran&aoiioa is a teqosst to i'r;ak& a digital «rosk become a pan of artoihes digital woik os to add a sheii 
d-hiock to enanio me- wkWQ ot lees cy a dfctnbutof ot !ho work. 

* The requester sends the sssver a massage to initiate an Embed ifaneacsion. This message indicates the work to 
he ainboddsid. tPe versioii ol the atnbed right to he used Is? the hansaction. the destmanoii add'esn isitomiaitors 
for placing the oart as a a work, the fllo data for the work, and she number oi copies snvoiyM 

* Ths se;vef cheeks the control spscsffcatxsns lor ati oi the rights in Ihe part and ths destrnahofi. It they are Ineorn- 
paiibis. the server snos Ihs •rartsastion with an error 

* The repositories perform the common opening transaction steps. 

» Ths se;ver transrslis ths requested contents and dais to the requester aecoid'inq to the transmission protocol It 
a Moxt-SsS -Oi-RigrJts has Mm provided, those rights ars transrnjitnd as ths rtgh!s tor im nem work Othnrvslsn. 
the nghtsof the orsginsl are t; ansmitien The Copy-Count held tor this right is set to the number-of-sopies reqpesien 
Sri * The repuasSet recorcss the conisnts. data, aed srsago rights and embeds ihs work so ihe dssiination isle 

* Tpe repositonss pshorm the common closing transsction steps. 

Th« Edit Transsotion 

An Edit tiarisactiost is a f^qusst to make a new digital work by copying, salecting and inodilying podlorss at m 
existlno dipitai work This operation can acioally change thn conicets of a digital ^ofH. The kinds oi changes S:ha! afs 
psrsTiittsd dspend on ths process Peing isssd. Like the sxti<trSldn operation, edit operates on porilons of adlgltsi work. 
In contrast with the extract operation, edit does not Meet the rights or locaiion of the work. It only changes the contents. 
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The seirsds of changes pmtti®&} are rjetsmtlrsso' »y ihs syoe spsc:tetfet-> of the gfooessor Sjsscitisd m the figbis. !« ins 
aerr ersiiy prsfarteo ambodtrnarvt art ads; transaction cnangss the worn isseSf ana does no! make a.oe* work However 
st weafd bs a r esssonsbto variation to eauss a o®w copy of the vwxs !o b§ made. 

•5 ♦ The requester sends she server a message to initiate m Edh transaction. This; message irtoKSies tba work to be 
aciited. m* version of ths soft right f© e* as«ci at the tfansaeaion. ihs fife ds*a ftx ine work (irtcitidirsg its $«e>, the 
process-fD to; the process, and the ri«inbsr of cosies snvoivad. 

* The osrvsr cbecks ;ne eotripatiMriy of ibe prosess-iO So fee used by she repeater against «my ptoeses-fO specs- 
fucatton sn ttw rtgfot. ft they are incompatible, it snos ihs transaction w$»s an srcof. 

w * Ths repositories pestorm tne common opening transaction steps. 

* The rooster mas Vt\s ptocess to change ths contents of the digital work as stesited. {For sxampfe. it nan select 
and c&plscats pahs a? it: combine if wan om«f trtorriation: or oompuis (unctions based or> the intormaficm. Tft» 
•can anx>t;nfio editing tsxt, music or pictures ot safcng wb8lievsroitw;Sief»sif8 useful in citing a derivative mxk.) 

* Th« repositories perform fhe somwcin csosing transaction sseps. 

•>.■> 

The edit transaction & used So cover a wide range of kinds d works. Ths casegoiy describes a pi ccess that takes 
as its input any portion of a ssork ano thso modifies tne input m sorne way. For example, tor text, a process for 
ecsiimg the texi wou&S require edit rsfjhis. A process for "wanafiHst^ or ecyr-iiincs words in ths irsst wouSa afeo bs 
corssfcSeted edritrig, for a rsnjsic 'te. twocsssif^ couiet involve chang^g she pitch or -erneo. or adding fevetberatsotjs.. 
or sny oSnfSf audio ssttesr For d^f<Ssi vid«c« awrks. mymm§ wttieh siisrs ins iniags wou«i rsquirss ri§h!s, E>!ampios 
wouici foe coloring, scsiiirsg. exv^ciing sii!- pfooios. seitic'ing anck.»T:btri:ng ifsiuifj? inio story boards sharper: ing 
sigrjsl pfocasshg, and so ca 

SorrifS ct««aors may wars; to proiest ihs SKittrnteny of their woi'ks by umitit^i m* inrtos e? processes ;h&t oan bs 
pertormed on Vbm if mm are no sdti nghife. tiiers no peoc^irsQ is aikjweci at «8 A processes ^tenM^fcan foe included 
to specify what kind of psocasa » ateml il no process Kfentrfter ss a{jocrj:od. then a-foitsary pro;;o«sais cars be nsad. 
For ars s>;ampio of ;s spoctttc proc-sss. a phCiOgrapbcr msy wmi so siiew use of bis photograph bui msy noi want ii to 
foe coiorigsd A musician may warn to aiiow isxiracsion of ooftions of his work bu;: nc-i cbangin^ of ihs 'onaiiiy. 

Ayth<srig8iton Transact tons 

so 

There are roarsy mys ih&l authorisation transaoi sorse can be dsfcne* f n tbo toisowf-ng, our pnsf srred way ss fo ssmps'y 
daline ihatn :u lertns o; other ifsn^actions thni wo «i;eady oeed for reposiioties. Thus. :i eorivon;sni aonioiitnea >o 
apoait o! •'anfhaiKatian :rar?saations ; ' > out they araactaaiiy tnade npot oihe; insfisiscttans 9m sopossfofii^s airoisfiy havo 

A usags right can specity an auiftenzaiion-iD. whtsh iPsnitfsos m mtem%tim ostsct {» dipstoi mfk in a tiie ot a 
3S standard formai) thai she repository most fws and which it must process. The sutnosizaljors is given so the gensnc 
autnortfaiian (or nckeSs sa;vor of the sepostiory which bogiiis ta intosprof the stuihanxaiion 

As oessnbsd sariict; ins aumorixsiiori oonsams a ssrver sdensifior. wf^ich may syst bs ins 9Siisric aninos-izatioo 
sstver or is u;ay bs arsolba; ssrvst. Wi-i&r; a tertKsts av;riortXa!ton server is ioqijirsd, it must contain a digital addrass. 
ii srsay atso contain a 0;gitaf cofiifscate. 
•so if a rsmote aasnori^afion sorvsr is required, tbrsn ins authorusuiors procsss tsrst psttonris Jhs foiiowing steps: 

* The gatiersa aaSbohiiaUon sasvsr atiissrspss to sa; ap the aomrfiijnjcaiiona ehatinet. {it the channei oarsrtot bs set 
ut>. iheo auinorteatfOi't faits wan an arror.5 

* Wiian iha ctertmi ;s seS rsp. iS pedorms a tegsaSiatsGii ptocoas with the remote raposrEo;y {if sogsaSiaSion faiis, ihsn 
tbo aijfhoi&aSiOi'i taiis wuh an sr ro;. > 

* Wnsn regsss ration is coiTiOieis:. ins gensrtc mflhonmian sorysr invokes a •Play" transnciion w«h ins rsrsote re> 
posiSory. SLtppiying the aashosixa;tai5 documemas tSie dio.iiai waskfo bepiayed. and the remote authofizatwi setva; 
is prognsrn; as the 'piayofT (Si fhe piaysr cannot be toiind or hns some other enor fhen toe autboriKsfion fenis wifh 
.an err®.} 

5® * The aothoraaiion ssrvet then Stays' ins aLSthorixation. Tnis srwofves desfyiitsng it ijssng either m© puhiic key ef 
tbs tmmt repository that issued ths osrtifioats or the session fs«y from tno reposstety that transmitted ft. The 
aytoersfistjon server than performs varsoos Sasts, 1'hesa tas;s vary secordtrs^-to the autSwixattcm aaivar 1'ney 
inciude st;ch steps as cheeking issije and vaiidtty dates of She asirsorixaUon and cheeking any hot-iisis of knows 
invaifri siithorroations The auSborii-ia'ion rssrvsr may roqeus i-arrytng out any oincr uansacunns on tbs rnpcwiinry 
as wit. such as cheeking diresfonas, getting aoma parsor; ta suppiy a password, or paying some other dig:iai 
work, it rmy ateo invoke some spacia! process for enackino. intofmaiion sbmst locations or tseant ovenrs The 
"script* tor seen steps <$ conteinsd within ;ns autbori^aiion seirvsr 

* i! afi ot toe i'sqissred stops are oornpistod satiSiacsorisy, ths Mmoftstston asrver cotnpiases the snsnsacttor? ftotmaKy, 
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stgrsailng th&t aumor&aSort is granted. 
Tli* insiaii Transastjon 

•5 An Instaii transaction is 3 rogues! to Install a dtgiiai work as namabie software on a repository, in atypical cam. 

the rsqusstef repository is a rendecfc§ repository and tt>« softv^sre woutes fee a n*w Kind or new version of a player: 
Also in 8 typloai casts:, the soil-wars wouki be coplod to ftte sysi«rs} of to® tequsster repository before is is installed, 

* The rsqyesJsf smtfs ths server an snstsii message. This message Incticaies ;ne work so be instated, spa version 
?<5 of the fostafi fight being invoked, and the Site data lor the work {incisding its sszo). 

* Ths repositories parterre !he oortisnon opening transaction steps. 

» The fsqusiSEsr extracts a copy of ths «%t»( ossificate few th* softaiere. If tns coriificais cannot fee founo or ths 
masse;' repositoty 'or She ce!i*cats « not know to. the regysstec Sba iraissacttcse one's witt! an error 

* Th« requests?' decrypts the eBgHtjf ceftsitcate using Vm pabSc ray of this master repository recording the identity 
« of ths supplier and msior. a key for de&yptmg the ssfiwaie. the conipatrbiilty infofmaSSw. and a teme&i-cbeckirtg 

node. tThis step certifies the software.) 

* The requestor decrypts tne software nssng ins k<¥$ 'rem the esaftieaie and computes a check code on it using a 
vway hssn tunctson. it the sheck-c-oefs csoss nor match the iampsf-chsctang cocis fssm tiia csrhticate, ins instsh 
tebcm transaction ends with an eirci. ;Th:s step assates fhss trie confeets of the soifvvrate, Indndiftg iite various 
scsipts. nave not neen tampered with 5 

* The requester retrieves th* instreetioos in the eonpatlbiSlty^Peckino. script and ioiiows inem It the software is not 
compatible wtth the repossfofy, ths lostaiiation itwtsnciton ©nds wrth m error {This step checks piatforrst contpat- 
ibiiity) 

* The feqye&ssr rslnsves ths instructions in the mstaiiatibfi script aridtoiiows them it thsrs is an error in ih« piotsss 
2S {such as (nS'iitictan! rssoufoee}. than ihs !nafi:;nction enris wt!h air mot. ^oie itrnSthrs snstaiiaiiof; prcs;r;s« puteths 

frjnnadis sofiwara in a piacs in -no rapossiory vsnara ft is no iongei accsssi&ta as a work for sxarcising any nsaoa 
rights osier than ths execution ot tne sol'wars as pnn of reposstoiy opsraiions in eafryinQ on;, other rmnssettons. 

* Tt<8 repositories pasiofsn tt!e cotmion ctosing tiansactioo steps. 

ae Th« y«&wtafl Transaction 

An Un:nsiatt transaction is a request to rernovs sottwaie tronrs a reposstosu Stncs uncontrotted or sicorraet roniovat 
o! aottwara tors a repository souid eorrspf-otrsise its banavsorai iniogrity, ;nis step :a contioiied. 

;k * reqoestsr sends the sen/sr an Untnsiaii sTjessage. This nisss&gs indiostss tpa work to be nnmsiatied. tne 
version of the iJninstaii tight being invoked, and the nie dnia for she work pncludsng its ««&). 

* The repositories perforrn the omort opaning transact Ion stops. 

* Tns requestsr esiraefs a copy of the dioitai centftente for tbe software. H ins ecrfiiieate cannot de found o; tne 
nrnsts; t&pomtxy for the eartiiiotsta Is; not knowr; io the teqoesist, the fnsnsaotlon axis with an airo;. 

•*o ♦ The rspnosfof checks whether thrj sofiwars is instaited. it ;he software is no; jnstaffso. the transaction ends wttn 
an srror. 

* The raqnasttsr decn/pts ;na digital censisoate usirtq ttse pnbt:s key ol tha rnastos ropostitory. ineofdrrsg the identity 
or ihs suppliar and eraator. a ksy for doerypiing the software, tne eomeatiDlllty irifofmaSoo, and a tamoar-ebsaklag 
code. (This step auiftenisoafes the osstifioaisor; of ths soltvraie. irtelndinq the script tot unlnstaiiing A.) 

* The rsqnesissr d<jccypts tne sottware trsing the ftey from ths csrtiticaia and comptitas a chrsck code on it using a 
t-way hasp iuncttctt. it the sneci«>cods ooss not match the tat?^«r«ch«cNing cod© ttom m« cshitscats, tne irtstai- 
tetxso tiarisaobon ertds wrtf; an ©trot. (This sfep assutas ihat tits cositents ol trto sottvtsttie. IneSndiftn tire varkrus 
senpts, naves not. been tampered wtfh.j 

* The requester retrieves the tn&tfnetiotis jo the uns'sstafiation scttpt arid follows tbem. if idere is an enx;r in this 
5e process (such as insijtfiaieot rgrsonfoesi. than the tiansijcfioo ends with an error 

* Tns repositories pshorm the cawon ctosing transaction steps. 



1 . A systea. for controlling the distribtiiion and tjse of digltai woiks cornpfising: 

means for attaching one or nsore hsaga rights to a digSsi work, each of said one or rnore usage rights speoltysnp 
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a js&nksuter instance of how said digital work may he- ased or -sssirsbvitsd, aach of said usage rights feeing 
capable of specifying si digits! liskot. She possession ot said d^aai t«kai being 8 eoKKien on th» exerciss of 
a rsg^t spscsfysng saso digital ticket: 

a pfurafay oS repositorlas for ««§ and exchanging digital works, each of said pkiralsty or repositories com- 
;: Ptisteg: 

s-orage means tor siohag digital works, their attached us&gs ngm*. and digitai ikMs: 
transaction processing means having a rsq-jsstsc mode oi operator; iw requesting access so a digits week, 
sasd request specifying a right ansa server mods oi opetsitiQfi fcr processing rnqsasts to access mxs 
rsqimteeS dipitai sak basse! **> &a!<3 usage right specified in said rsqusst. the usage rights aitachacs to so-d 
?c digrtal work, and digiiai tickets associated vvrih sak3 usage ngfiis: 

a gonann hokei sgen • lor punching digital lickeis to Indicate ite on i-sssocsstad usaga right has dean {Sietdsec!: 
and 

a coupling means for coupling to another of raid plurality of ieposiiodes across'S coimiunicaiiens medium 

« 2, The system as recited m Ciasre : v»h«f«tn a usage agM may specify a special ttcKsi agsrtt for punctaraj s spsethsei 
SigflaJ ticks! and said system Is katnsr comprise ot one or more awharaestiort naposrtotiss containing special 
ticket agents lot peaching drgiiai tscksis. 

3. The system as rscfteci in Ciaim 1 wbemm said dlgitai ticket ® eornpnsed of a firs- trrr -sstramp pod lor indicating a 
time when said digital isckst was copi«cs ana a second itm^stamp pm tor snoicaung a twne when said &qM ticket 
was punched. 

4. t "ha eys-em as recited m Oiaim 3 whorem saxs generic hckei agent is furshesf comprised oi a means tor determining 
if a digaai ticket :s -rakd and hrnestafnpirsg means tor limsstamping digita* nckeis witer- they are punched 

ss 

5. A method lor ccnSfOiiing access to cSi^ts! wor ks In a computer coniroiied system for -ha d-siilbauoo ol dlgrlai works, 
compiising the steps of: 

a) creating a digital work and a digitai ticks! tor said digiiai wor-c 
aa b) auaehihg a asags right -o sard digisai work, said rssags fight specifyihg said dsglsai ticket: 

cj sioriag said 6igm work m a ismt ieposiiofy: 
d) srorlng said digiiai ticks! in a saaood repository: 
a! a Si5iixl ?«posri;ci:y acquiring said dfgitai tekei itom said sc-cosid reposSo-y. 

f) said third repoaitory Sraasni:ttlog a rrsguasi io acoass saio digital wods to said first repository, said reques- 
ts spscifyifsg said usaga right; 

gj said lira* I'sgosstoiy desorr^nsrig s! ssld thlid roposliory has said diqstal iicket, 
h> said third i-apository peeaaoiing said digital ticket te said first- repository: 
li said first rsposrtofy tr&aSiOiSirrsg said digital work lo said third reposiiory: and 
ij said fast ropc-srliory paoohing saki dipitai -ioket. 

6. Tho (oeihod as recitad in Claim 5 wharsln said step of a third repository acquiring said digiiai ticket tfom said 
ssooad reposiiory is further comprisso. of it;o siap ol msd third rsposiiojv cqjying said dlp*iii ttctcel Iran sad second 
repository lor a fee. 

■as 7. "ne moii- xt 'aoit-M :a i"l :•!!- 6 >*t- ae s i s o> ii t c-a N ' 'S oc-mpr:s--rt c-' ^ 1 a - : ■imes-.-'i-ss p in c-r siou'-g « -mis 
whon ^atd d:g!i«i ^oko: v^s cepjop and second SarosUnp pais ior s:cM-g •> -(inos-^-T-p a.-ic-' s-:;o v«g-!o ickct 
wks, r jt \.' and s i d stop oi v.oOying i..a!d a>o!"-;i ;k.kta 1 t ^sd s^:^ o^d s ei..os!K>ry \>: a ias "j iof " corals >; s.o 
o - 5aa aap v * v Mi w< % ncs f cp ^ % «\ a\jtk)r- 1 -? ttd 'irsi •'mof toa-p n n o" -s oin x >. 'i ;r>nt >v:th ,i cenv istn^stjaia 
>: 'ji N --:tinc! a i no .-sno caie ^hoa ma o^pjr r-; s.-sso d-;,siai t c ss>i was n-nan 

;'d 

8. A method tor controlling She number of times that: a asape right attached to a digiiai work may se tsxamiaea m » 
coiTipofer oorif-oiisd sysisrn for the dlstrihaiiori of digital wo- : ka : said roethod comprising the steps of: 

a) creating a dtglfai work; 

aa b> defining a asaga tight for said digiiai work, said risaga iigtit apacifylfig a digrtal sickoi ifsdieailfjg a prsdoior- 

aiined number ol flniss that said aaaga right missy ba i-sxorclscd; 
a) orsaitag said dlglfat tlckst with an thdioator of said pradciarmlned nyrnhsr; 
d) storing said digiiai work, sold usage righi and said digiiai daks! in a first rsppsitcsy": 



2? 



EP071SM7A1 

«> a second repository tfisnsfrsitting a r«$imi to accsse sale dkjiiai work to said first repository, said rsquss! 
specifying said usagd «ght; 

f) sard firs! repository data nTiisiing :• saia digital Pcksi for said ossge fight jmSfcass* that said usage rsgiii has 
been exercised said predetermined number c<i tiroes: 

gj 8 sard digits.! ticket rndicatss thai said usags sigh! has m&t- m®tomd safes ofsdstersriresd numbs? o1 times, 
said first r3pository danyiog access ;o said digitai work: 

b> if said dfgiia! tiotoi wdfczgm thai said usage rrghi has not bean ©xs-rcssed said s«ad8i«rf?i>r!8d rarri&sr oi 
trass, said timi repository graaisng access io satd digiiai work, and 

13 said first repository punching said dtgiiai tickei to indicate an instanco of exercising said sjsage right. 

8, A method for aontajiiing ihs aessss to digital vwks in a car-ispusar coniioiied systsm tor the disirrbiii ion of digits! 
works, sasa method comprising the steps of: 

a) creating a digiiai work and a digital ticket: 

b> osteins a «gW for digital work, sasd ssage rtgm specifying said digiiai ticket and a spsciai ticket 

agesf;! for pane Nag said digital t«k&i: 

c) aiorifig said ctsgisai work in a twst repository. 

d.j disiribyfing said digital ticket io a second repository: 

a) said seeoad repository ttarsstrstftsrst} a rsguss; -o access said digiiai vwakio said isrsi ieposliory said request 
specifying 33 id iisago rsgnt: 

f] said tirsj repository detcrrr-sining if said second repository has sard digital ticket: 
9} said second rsposriosy presenting sad digits! jacket io said tirst repository; 
h> sard first repository presenting said digital tiefust to said special ticket agent: 
i! said spe-crat ficket agent determining si said digital ticket is valid: 

ii if said digits ticks! « mal«k satP sacciai ticket sgersi carisiiig said raqiiasJ to access io be dar«ed: 
k} ■■ sasd dlgttai pokes is vaiio. said specie; uom aqmi punching said dsgiisi ttckes: and 
i) ss-id fjr&t repository granting acosss fo said dsgiiai work by said second repository. 

10, A rasihod tor distribr.i!;on of ijpgnadss to Pigita; works m a cor5>pu!cr coniroiisd systar?5 tor the pistnouiion of digitai 
works, isaid rrtetnod compristng ?he steps of: 

a) creating a digits! acker, said digital ticks; psrniiiting copying ot an spgrado digriai work: 

b; dssisibuiitjo said dtgiin! ttckar and & corresponding dsgii&i wg;K to a fust raposifory for a tso: 

c} crsatiog said upgrade dsgitai work, said iipgsaas dig-tsi wet* havsng a copysng tor periling copying 

of said spgrade digstai work to possessors of sard digrtai tsckai: 

dj stoisng sasd apgrada P;gifa! work In a seoaiid rsposiiary: 

9} sard firs! reposiiory iransmSfing a raqsasf io copy said dsgitsi work to said second repository: 
i; said second repository cietermsniiig it said firs- mpossfory n&s said digirai trckai: 
g; sard Jtrst mposstoiy pfossfifsi'sg :>•? id dipitoi aokfst io said sosor5d sspostiory: 
!} said sc-corsd reposiiory daism-ming ii sasd digstai iickpf is valia: 

]i it said digltisi iicket sa trivassd. said ssoond repository causing s&:d repijes; to copy io be deniod: 
k) if sasd digtiai mm is vaiid. said Siscotid rap«;i;ory punching said digital ticket; and 
i) sasd sscond roposifory tfansniiifing said spgrado dlgsai work to said first repository 



28 






T« Credit Server 



28 



EP071SM7A1 




30 



EP071SM7A1 




EP071SM7A1 



2%m 



mm® 



s§„oqo 



mm® 



mm® 



510 



Ad 
51 1 



Stores 
512 



StervC 
513 



Fig. 5 



0 10,000 30,000 



1.5 


00 


25, 


000 


Text 
$14 


Photo 
€15 


Graphics 
S1S 


Sidebar 
«17 



Fig. € 



32 



EP071SM7A1 




34 



EP071SM7A1 




EP071SM7A1 



?50l— -Ilgit®! Wmk &SgM8:« {Sights*} 

IS02~~RigItt :« <Sigbt«Cdte {Capy-Coaai} {C»»tr«J-Sg*e} fErns-Bpee | 

I^S'wEJgfet-Cod* : as R«&ster -Codo | Trsssgett-Ced* | Fil8«Maa&g*sa«»i» 
Codej Dsrivativs-Works- Cods { Coaljg\jraliss-Gs4e 
t§Q4~~mi*&*r*Ct>d* ; « C Piay :. {Player; Pkyer-ID} | Frmt; {f rkte; Priater-IB}J 

f SQS^- Trssis|Kirt-€o«b ; ~ [Copy | Trarssfsr | hmn {Eemai siag~Right«: 
N«x 1' -Set-of- Esgb tsjlKNexl- Cop y-Ei ghts; Nsxt^t-of-BigSate}} 

N«st-S«fc-»f-Sigkte} | Bestors J Delete f Pclder 
| Directory {Name; Hkls-Laesd j B:kle- Remote] 
{Farts: Hide-Lc*aJ ] Hide-Rsmate} 

.N«>x$>S*t-*f Eights) 
?5&$^C«j^gur<sfi»s-Cs«te x- Install \ Osisstall 
ISSS— -Nesd-Set^-SIgMs t« {{Ads!: 8*t.-Of~Etgkis5f |(0«f ete; 

Sat-OfcEigte)} {(B«gIaaK Sst-Of-BSghis )K(Ke8^ Set-Of-Sigte » 

iSit ^CimtmhBpms ; ~ (Coairoi; {RssMctabkf Darestffetafcfe} 

f£?2-wTij»e»Spe« : ~ ({f is«i-M«r¥&i f SlMiag-M«r?d j Metes-Tims} 

f SO-^-Flsssi-IsjterPsl i— From: Stert-Tjmt 

?$'?§-— Ac«®8S-%*e ; ~ (f SO: Ssesnty-Ckss} {A«tbor isati&tj; A«thomatje&-XB*} 

{Ot&er-Ayfetsr s&siba; Au&sjri^ati«a-H>*| {Tickst; TieksfcviD}} 
f SI J~^F«e-Spse; a» |Sch«d«kd-D|g««st} Eeg^Iar-f e«-S|?$c } Sc33^u2«d-Fee-Sp*e j 

(Tisas-Spso P*rceai&ge}*) 
f£f§'^i$«gu!&f~F£«~S$!$e ; ~ (|f { incentive:} [Psr-Uss-Spee | Met«r£d-Rat«~ 

B$m ] Ikst-Pries-Spee | Cali-Foy-Priee-SptBe] 
{Mia; Maaay-Uait Per; Taae-SgecHM&je 
Maaey-Usrl: Per: Ti3»8-%i}o}T8: Accourifc-fD) 
fSW^PeifrUM-Spm: « F«s"4Js«: Moa«y-usit 
f 52f *wMet«r«d«8*t«^p«« : ~ M&temi; Meaey-Oait Pert Tim*-S|>«e 
?$^-^Best«Ptie*>Sp*e ; - Best-Price*; Mcm*y-uait M«; Moaey-uait 
tS23^Call«For>P«le«»8p«e ™ Csii-For »Frie« 
IS2^-^ geij«ji»i«cS-F«s»Spee™ (Schedule: (Ttm«-Sf«cB.§faia?-B 1 ee-Bpgc;i* ) 
IS2S — ■ Msrkmp-%«si: ~ Markup: pe?s«Btags To; Acceii&t-SD 




3? 



EP071SM7A1 




38 



EP071SM7A1 





EP071SM7A1 





41 



EP071SM7A1 



(Mess 



EUROPEAN SEASCB REPORT 



30 8422 



CUMEN1"*> CONSIDERED TO BE RR.EVANi 



I* 45, line 10 ■ p&3» S3, i 7 * 

23& §04 i$m nictmnrm isc) 

*' pap 9, line II - sags 28 s line IS " 



0S-S-5 291 S96 (HIT A) 
* the ivtsois document ' 



j 



Sm-fJ) fSJiSJ^ bftS $HWH ftp Sif 3& dfeiUSS \ 

THE HAGUE | 1 April 1996 j fens* R 

A i ^sukj^^R^ " .,..„,„ m ,....,^.„,,^.',„„,.,.., s .„ rtS ,.,,.- rt „,,-,„..., ,..,,.,.„..,„ 



42 



